The reform to the Data Protection Act ("Reform") was enacted and published on 13 December 2024. The Reform will not come into force immediately but will take effect 24 months later, on 13 December 2026. This transition period gives companies two years to adapt to the new obligations. During this time, the new Data Protection Agency will also be established and staffed.
The Chilean Cybersecurity Act entered into force in January 2025, with the first head of the Cyber Security Agency appointed. Starting in March 2025, the first companies will be notified to adopt the higher standards required for Critical Importance Operators, as defined in the Cybersecurity Act.