Last Monday, May 8, the Personal Data Protection Bill (“the Billâ€) concluded its discussion in the Chamber of Deputies and was submitted back to the Senate, where it was originally filed. Considering the prompt processing of the Bill over the past few months, it is expected that during late 2023 Chile will finally have a regulation appropriate to the digital economy environment in which we operate, with a governing authority, new rights for data subjects and the possibility for organizations to certify their compliance models; among other matters.
The main amendments introduced by the Bill are as follows:
a. New obligations for the Data Controller: these will be required to make data subjects aware of the background information that certifies the lawfulness of its processing; to maintain secrecy or confidentiality about personal data concerning a data subject; and, in accordance with the corresponding state of the art, implement appropriate technical and organizational measures from the design prior to and during the processing of personal data. Read more