IMPLEMENTATION · LAW 21.719
Is your company prepared for Chile's new Personal Data Protection Law?
Starting December 1, 2026, organizations that process personal data will need to operate under a new compliance standard. At Dupouy & Méndez, we help companies assess their situation, determine which obligations apply, and implement the legal and organizational measures required for compliance.
Initial readiness check · 5 questions · approximately 1 minute
Your company is already processing personal data.
You don't need to use artificial intelligence, biometrics, or large databases. If your organization keeps information on employees, clients, suppliers, applicants, users, or business contacts, it carries out personal data processing that must be considered within its compliance model.
Assess my companyCompliance requires more than updating a privacy policy.
The new regulation affects how organizations obtain, use, share, protect, retain, and delete personal data. The specific obligations depend on each organization's characteristics and the processing activities it carries out.
The first step is determining what your company needs to implement.
Take the initial readiness checkINITIAL READINESS CHECK
Is your organization prepared?
Answer five questions to get a preliminary indication of whether there are matters that should be reviewed under the new regulation.
5 questions · approximately 1 minute
This check is for guidance purposes only and does not constitute a legal compliance assessment.
From assessment to implementation.
Every organization handles data differently. Our work consists of determining the obligations applicable to your reality and supporting the implementation of a compliance model suited to your operations.
01
Assessment
We analyze the organization's situation and the processing activities it carries out.
02
Design
We determine the legal and organizational measures required.
03
Implementation
We support the effective adoption of the defined measures.
04
Follow-up
We support the continuity and ongoing update of the compliance model.
When processing calls for further analysis.
Processing sensitive data and certain technologies or forms of processing can generate additional requirements. We assess these situations within their specific context to determine the applicable obligations and measures.
Compliance designed to be implemented.
Data protection should not be limited to isolated documents or policies. Our approach integrates the legal, organizational, and operational aspects needed to build a compliance model that fits each organization's reality.
Frequently asked questions about Law 21.719 implementation
Which companies need to prepare for Law 21.719?+
Organizations that process the personal data of employees, clients, suppliers, users, applicants, or other individuals should review how the new personal data protection regime applies to them and what measures their operations require.
Is updating the privacy policy enough?+
Not necessarily. Achieving compliance can involve legal, contractual, organizational, security, and data-subject-rights aspects, depending on the specific personal data processing each organization carries out.
Do all companies need to implement the same measures?+
No. The specific obligations and measures depend, among other factors, on the types of data processed, the purposes of the processing, the technologies used, the risks involved, and each organization's characteristics.
When does Law 21.719 take effect?+
Law 21.719 takes effect on December 1, 2026. Organizations can use the period beforehand to assess their situation and prepare the measures needed for compliance.
How can I find out what my company needs to implement?+
The first step is identifying the personal data processing your organization carries out and assessing which obligations apply to its specific reality. This page's initial readiness check helps preliminarily detect whether there are matters that should be reviewed by a professional.
Prepare for the new personal data protection standard.
Determine whether there are matters within your organization that should be reviewed under Law No. 21.719.