ChileLey 21.719, Agencia de Protección de Datos Personales, Sanciones
Ley 21.719, art. 35 (sanciones) y arts. 42-45 (procedimiento administrativo y judicial)
An enforcement supervision rule binding public and private bodies.
- Audit expectation
- on_request
- Who audits it
- Regulator
What it requires
- Adopt, within sixty days, the measures the Agencia de Protección de Datos Personales sets to remedy the cause of a sanction.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Enforcement body
Agencia de Protección de Datos Personales (APDP), from
Settledness
- As of
- Open questions
- Does "a sabiendas" (knowingly) in Article 34 quáter letter e) require that the controller actually knew the data were sensitive or a child's or adolescent's, or does it also reach a controller that collected such data in bulk without sorting it first?
What it makes you log
Logging duty
Article 35 sets the sanction tiers and Articles 42 to 45 set the sanction procedure and the judicial claim; none of them requires a controller to make or keep a log or record. Article 42(i) gives the Agency broad powers to request records or reports in a sanction procedure, which is a power to demand information and names no record the controller must keep. Article 34 ter makes omitting the breach communications or the breach register an infraction, which enforces the register of Article 14 sexies on the row that carries it, and is not cited here. No period for keeping any record is stated, and the sections cited here carry no territorial clause, so the hook is empty.
- Kind
- None
- As of
What this law does
Ley 21.719 establishes the Agencia de Protección de Datos Personales (APDP) as data-protection regulator, with an administrative-sanction procedure for infractions classified as leve, grave, or gravísima, escalating fines by tier, and a further judicial review of Agency decisions before the Corte de Apelaciones.
Article 35 sanctions a leve infraction with a written warning or a fine of up to 5,000 unidades tributarias mensuales, a grave infraction with a fine of up to 10,000, and a gravísima infraction with a fine of up to 20,000 unidades tributarias mensuales. Persons affected by a decision of a public body handling their data under this law may also bring a claim before the Corte de Apelaciones under the same procedure.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .