Chile Senate Delays Data Law to 2027

Update November 5, 2026: Chile’s Senate approved the bill in its first constitutional review, amending Law No. 21.719 and pushing its effective date to Oct. 15, 2027. The measure, identified as Bill No. 18.623-07, was sent to the Chamber of Deputies for its second constitutional review.

Chile’s Senate approved the bill that delays the start of the Personal Data Protection Law until Oct. 15, 2027. The vote passed 33 to 6, and the measure now moves to the Chamber of Deputies for its second constitutional review. The text also changes the makeup of the governing council of the Personal Data Protection Agency, which would grow from three members to five.

What did the Senate decide?

The Senate approved the postponement and sent the bill to the Chamber of Deputies for its second constitutional review. According to G5 Noticias, the chamber backed the measure by 33 votes to 6. The main change sets a new effective date of Oct. 15, 2027.

What other changes does the bill include?

Beyond the new deadline, the bill would increase the number of members on the governing council of the Personal Data Protection Agency from three to five. El América reported that change while covering the bill’s legislative progress. The Senate Constitution Committee had already reviewed 15 amendments submitted by senators and the executive branch before approving the bill article by article.

What happens before it is enacted?

Until the amendment becomes law and is published, the legal date in force would remain Dec. 1, 2026, according to Guerrero Olivos, although the source itself said that detail was not officially confirmed. In parallel, the bill still has to complete its process in the Chamber of Deputies before becoming law.

The legislative debate centers on Law 21.719, whose entry-into-force schedule now depends on the outcome of the parliamentary process. With Senate approval, the text advances with a postponement that extends the originally planned timeline and adds institutional changes for the future Personal Data Protection Agency.