Rules / Chile

Law 21.719 regulating the protection and processing of personal data and creating the Personal Data Protection Agency - Art. 8 bis automated individual decisions

Enacted, not yet in forceLawBindingLey 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos Personales

New GDPR-style data protection law; Article 8 bis gives individuals the right to object to and not be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, with exceptions for contracts, express consent or law, and requires safeguards including information, explanation, human intervention and the right to contest. Applies to all controllers processing personal data in Chile.

Why it matters

From 1 Dec 2026 AI-driven credit, hiring and eligibility decisions about people in Chile need human-review and explanation mechanisms.

What it requires

Human oversightTransparency to usersData governancePenalties
SourceBiblioteca del Congreso Nacional (LeyChile): https://www.bcn.cl/leychile/navegar?idNorma=1209272 Checked against the source on 4 Oct 2026. Published 13 Dec 2024; enters into force on the first day of the 24th month after publication (1 Dec 2026).

Cite this record

Law 21.719 regulating the protection and processing of personal data and creating the Personal Data Protection Agency - Art. 8 bis automated individual decisions. National Congress of Chile. Status: Enacted, not yet in force. wheresthe.ai, https://wheresthe.ai/rule/cl-law-21719-data-protection-automated-decisions/ (verified 4 Oct 2026).

More from Chile

  • Chile AI Bill
    BillNational Congress of Chile (Executive bill, Ministry of Science)Non-bindingPartly confirmed
    Proposed