{"id":124984,"date":"2026-11-02T08:52:51","date_gmt":"2026-11-02T07:52:51","guid":{"rendered":"https:\/\/ceadigilaw.org\/?p=124984"},"modified":"2026-11-02T08:52:56","modified_gmt":"2026-11-02T07:52:56","slug":"chile-senate-delays-data-protection-law-2027","status":"publish","type":"post","link":"https:\/\/ceadigilaw.org\/en\/blog\/chile-senate-delays-data-protection-law-2027\/","title":{"rendered":"Chile: Senate approves delaying the new data protection law to October 2027"},"content":{"rendered":"<div class=\"cea-blog-resumen\">\n<p><strong>In brief<\/strong><\/p>\n<ul>\n<li>On 28 October 2026 the Chilean Senate voted 33 to 6 to postpone the entry into force of the new personal data protection law to 15 October 2027.<\/li>\n<li>The bill now goes to the C\u00e1mara de Diputados; until it becomes law, the date of 1 December 2026 remains in force.<\/li>\n<li>The debate centres on setting up the Agencia de Protecci\u00f3n de Datos Personales and on demands for a verifiable timetable.<\/li>\n<\/ul>\n<\/div>\n<p>On Wednesday 28 October 2026 the Chilean Senate approved a bill postponing the entry into force of the new Personal Data Protection Law (Ley 21.719) until 15 October 2027. It matters because the law, passed in 2024, is among the most significant data reforms in Latin America and the Caribbean, and its timetable affects businesses, individuals and the future supervisory authority. <a href=\"https:\/\/www.pauta.cl\/actualidad\/2026\/10\/29\/senado-aprueba-prorroga-de-ley-de-datos-personales-entrada-en-vigencia-se-posterga-hasta-octubre-de-2027.html\" target=\"_blank\" rel=\"noopener\">Pauta reported<\/a> the vote.<\/p>\n<h2>What was voted and where it stands<\/h2>\n<p>The upper house backed the initiative by 33 votes to six. This is Senate approval, not a published law: the bill now moves to the C\u00e1mara de Diputados. Until it becomes law, the date in force remains 1 December 2026.<\/p>\n<p>The stated aim is to allow more time to implement rules that introduce new obligations for businesses and stronger guarantees for individuals over the use of their information.<\/p>\n<h2>Questions over the Agency and critical voices<\/h2>\n<p>Public debate focuses on institutional readiness. Senator Paulina Vodanovic argued that the extension should be justified solely by the need to set up the Agencia de Protecci\u00f3n de Datos Personales properly, and called for a verifiable timetable and concrete commitments. She said the extra time should be used to appoint councillors, hire specialist staff and enable supervision and complaint procedures, and that the planned resources will need review during budget talks.<\/p>\n<p>From the legal sphere, lawyer Rodrigo Rojas questioned adding twelve months to the two years already granted, warning about the exposure of sensitive data such as identifiers and medical records while some companies have not adapted their procedures.<\/p>\n<h2>Comparison with the GDPR and lessons for the region<\/h2>\n<p>The EU General Data Protection Regulation (GDPR) was adopted in 2016 and applied from May 2018, after a two-year transition. Enforcement there began with authorities already in place, albeit unevenly resourced. Chile starts from a different position: it must create a new authority while demanding compliance. The timetable therefore depends as much on institutional capacity as on the legal text.<\/p>\n<h2>Our view at CEA Digital Law<\/h2>\n<p>At the <strong>Euro-American Committee of Digital Law &#8211; CEA Digital Law<\/strong> we believe an extension can be reasonable if the supervisory authority is not ready: a law without an operational regulator creates rights that are hard to exercise and leaves legal certainty in doubt. But postponement is only a sound decision if it comes with public, measurable milestones: appointments, budget, guidance and complaint procedures with firm dates.<\/p>\n<p>We suggest three steps: a published timetable reviewed periodically; sector guidance for SMEs, which need support most; and, for companies, treating the extra year not as a pause but as room to map their data, review lawful bases and prepare incident management. European experience shows that late starters pay more later. One question remains open: whether the C\u00e1mara de Diputados will keep the text as it is, and what interim safeguards individuals will have meanwhile.<\/p>\n<h2>Sources<\/h2>\n<ul class=\"cea-blog-fuentes\">\n<li><a href=\"https:\/\/www.pauta.cl\/actualidad\/2026\/10\/29\/senado-aprueba-prorroga-de-ley-de-datos-personales-entrada-en-vigencia-se-posterga-hasta-octubre-de-2027.html\" target=\"_blank\" rel=\"noopener\">Pauta: Senado aprueba pr\u00f3rroga de Ley de Datos Personales<\/a><\/li>\n<\/ul>\n<p class=\"cea-blog-firma\"><em>CEA Digital Law<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Chile&#8217;s Senate has approved postponing the data protection law to 15 October 2027. What it means for businesses, the new Agency and the road ahead.<\/p>\n","protected":false},"author":2,"featured_media":124988,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"wds_primary_category":0,"wds_primary_cea_women":0,"footnotes":""},"categories":[1107],"tags":[1433,1431,1409,1434,1012,1432],"cea_women":[],"class_list":["post-124984","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection-privacy","tag-agencia-de-proteccion-de-datos-personales","tag-chile","tag-data-protection","tag-data-protection-agency","tag-gdpr","tag-ley-21-719"],"acf":[],"_links":{"self":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/124984","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/comments?post=124984"}],"version-history":[{"count":1,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/124984\/revisions"}],"predecessor-version":[{"id":125016,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/posts\/124984\/revisions\/125016"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media\/124988"}],"wp:attachment":[{"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/media?parent=124984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/categories?post=124984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/tags?post=124984"},{"taxonomy":"cea_women","embeddable":true,"href":"https:\/\/ceadigilaw.org\/en\/wp-json\/wp\/v2\/cea_women?post=124984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}