Chile moves on data and cyber rules

Congress moves on data and platform rules

Chile’s Chamber of Deputies Science Committee agreed to begin considering a bill that would require digital platforms to establish a domicile in Chile, identified as Bulletin No. 18.362-19. The proposal originated with lawmakers and is in its first constitutional stage.

At the same session, the committee also continued debating a bill that creates a framework for algorithmic liability and digital protection for children and adolescents, Bulletin No. 18.318-19, likewise in its first constitutional stage. The presence of both initiatives on the legislative agenda shows the lower house is reviewing rules for digital intermediaries and specific safeguards for minors at the same time.

Data governance in the Senate

In parallel, the Senate Committee on Future Challenges, Science, Technology and Innovation is continuing its general debate on the bill that creates the National Data Management System and amends other legal texts, Bulletin No. 17.590-05. The initiative was introduced by the President of the Republic and remains in its first constitutional stage.

The discussion was formally entered into the committee’s work calendar at the August 10, 2026 session, confirming that the bill remains active in the upper chamber.

Personal data law still awaiting a decision

On personal data protection, Economy and Mining Minister Daniel Mas said the government is assessing whether to delay the entry into force of Law No. 21.719, which is currently set for December 1, 2026. That information was attributed to the source consulted, but there has been no official statement or published regulatory change.

The possible delay comes as public debate continues over implementation timelines for the new law, while the regulation remains a point of institutional and technical discussion in Chile.

Electric-sector cybersecurity gets an accelerated review

In the energy sector, the Undersecretariat of Energy instructed the National Energy Commission (CNE) to finish the draft Technical Standard on Cybersecurity and Information Security for the electric sector, remove the chapter related to the electric CSIRT, and send the cleaned-up text to public consultation no later than August 31, 2026. The official goal is to publish the standard in 2026.

The order also set August 14, 2026 as the deadline for the CNE to send the revised text and the remediation matrix to the Undersecretariat of Energy and the National Cybersecurity Agency (ANCI). It further instructs the removal of any provision, definition, or reference related to the designation, structure, or powers of a sectoral CSIRT or Electric CSIRT, so that design is excluded from this standard and left to future ANCI regulation.

Sending the text to ANCI means the agency will serve as a technical co-reviewer of the electric-sector standard before public consultation, in a coordination scheme between the energy regulator and the national cybersecurity authority.

Existing technical framework

The CNE has also been placing the development of digital substations within the Technical Standard on Security and Service Quality and the Technical Annex of Minimum Design Requirements for Transmission Installations. According to its institutional communications, those instruments already include criteria for technological compatibility, redundancy, and secure design, and the future cybersecurity standard will complement that technical framework.