Chile

New autonomous Agencia de Protección de Datos Personales established by 2024 reform. Operationalising.

Consent required as primary basis. Must be free, informed, specific, and unambiguous.

Rights to access, rectification, cancellation, opposition, portability, and blocking.

Transfers to countries with adequate protection or with appropriate safeguards.

Must notify the Agency and affected individuals. Reform introduces mandatory notification.

Required for certain categories of controllers under the reform.

Parental consent required for children under 14. Enhanced protections under reform.

Fines up to 2% of annual revenue or UTM 20,000. Significant increase from prior regime.

CMF financial data rules, health data regulations, telecom provisions.

General consent requirements apply. No specific cookie regulation.

Right to not be subject to solely automated decisions under the reform.

No general data localisation requirement.

No equivalent concept.

Law applies to both public and private sector.