Chile delays data privacy law to 2027

Chile's government sent Senate Bill 18,623-07 to postpone the entry into force of Law 21,719 on personal data protection by one year, shifting its application to 2027. The bill is moving under urgent procedure, which shortens debate time in committees and on the Senate floor, according to the legal analysis cited by Nivel4.

What changes with the delay?

The proposal pushes the start of the law to 2027 and, according to analysis published by Anguita & Osorio, it also extends the written warning period during the first 12 months for all companies. Under the current law, that benefit was limited to smaller businesses.

What happens with the future agency?

The proposal also changes the institutional design of the future Personal Data Protection Agency. ADN Radio reported that the bill increases its governing board from three members to five and sets a quorum of three members to meet.

BioBioChile also explained that, under the regulation itself, the agency should already have been operating no later than June 1, 2026. According to that same report, its top leadership rests with a three-member board appointed by the president with the approval of two-thirds of the Senate.

What does this mean for organizations?

The delay gives companies and other regulated entities an extra year to adapt processes, governance, and compliance to the new law. Different analyses of the bill agree that the change does more than move the effective date, it also reshapes the transition toward the future data authority.

The debate is also constrained by the bill's urgent status, which narrows the legislative window for introducing substantial changes before the vote.