Data inventory & records
Records of processing activities (RoPA): which data you process, for what purpose and on what basis.
Diagnosis, legal counsel, operations, technology and ongoing support so your organization is ready for the December 2026 enforcement. We don't just explain the law — we leave it implemented.
Part of Alaya Digital Solutions · 20+ years · Team 100% in Chile
Over 20 years advising large organizations in Chile since 2005, with a team based in Chile, up to date with the local regulatory framework.
We're no one's branch office. We know the Chilean regulatory reality and support your team on the ground, not remotely.
Part of Alaya Digital Solutions, advising large organizations since 2005.
We support banking, retail and other regulated-sector organizations in their Law 21.719 compliance process.
Experience in complex governance, security and digital transformation projects for leading clients.
Organizations that have trusted Alaya Digital Solutions
Banking, mining, retail and public sector.
The Personal Data Protection Agency begins enforcement on December 1, 2026, with fines up to 20,000 UTM for the most serious infringements. Getting compliant takes 1 to 6 months: the time to prepare is now.
We're already implementing Law 21.719 in banking and retail organizations in Chile. We combine over 20 years of experience in complex projects with our own methodology for diagnosis, prioritization, plan, execution and ongoing operation. These are the components we leave up and running inside your organization.
Records of processing activities (RoPA): which data you process, for what purpose and on what basis.
We define and document the legal basis for every personal-data processing activity.
Processes to handle access, rectification, erasure, objection and portability within deadline.
A procedure to detect, contain and notify incidents to the Agency and to data subjects.
Processing clauses and contracts (DPAs) with vendors and third parties that access data.
Data protection impact assessments (DPIAs) for high-risk processing, when applicable.
Roles, internal policies and team training to sustain compliance over time.
Privacy notices, policies and evidence organized and ready for an audit.
Some of the organizations that have trusted Alaya Digital Solutions
Five ordered stages to move from "I don't know where to start" to compliance that is operating and sustainable.
We assess processing activities, risks and gaps against Law 21.719.
Starting pointWe rank findings by regulatory risk and business impact.
FocusWe design the adaptation plan with owners, deliverables and timelines.
RoadmapWe put contracts, policies and processes into motion and enable the technology (OneTrust or our solution for SMEs).
ImplementationWe operate, monitor and support you in the event of an audit.
Long termThe same rigor, with the scope each organization needs. Choose based on the size and complexity of your operation.
Fast, supported implementation
A direct path to get compliant without friction or unnecessary complexity.
For companies that need to comply quickly and well, without complexity.
Comprehensive end-to-end compliance
Data governance, automation and integration for regulated, high-volume environments.
For banking, retail, mining and public sector in regulated environments.
The market offers parts. We take ownership of Law 21.719 compliance from start to finish, with a single team.
End-to-end implementation of Law 21.719 in Chile: legal, operations, technology and ongoing support in a single team.
Technology & alliances
We work with leading privacy and data-management platforms, such as OneTrust.
We combine local experience in regulated sectors with platforms of international standing.
Support in compliance and data governance for banking and financial services.
Data protection in high-volume operations with direct customer contact.
Personal data of workers and contractors in industrial environments.
Processing of citizens' data with a focus on traceability and transparency.
We implement OneTrust, the privacy platform used by large organizations worldwide.
Any organization that processes personal data of people in Chile, public or private, regardless of size or where it is incorporated. If you register customers, employees or users, the law applies to you.
Between 1 and 6 months, depending on the size and maturity of your organization. Since enforcement begins in December 2026, it's best to start early to be ready in time.
A 30-minute meeting to evaluate your situation. We then deliver a report with the gaps detected against Law 21.719 and a prioritized adaptation plan. No obligation.
We build on them. We start from what you already have, identify what's missing against the law, and complete your compliance without redoing what already works.
Yes. We have a guided solution for SMEs and mid-market, and an integral implementation with OneTrust for enterprise companies in banking, retail, mining and public sector.
The Personal Data Protection Agency can review your lawful bases, your records of processing activities, the handling of ARSOP rights, breach management and your compliance documentation.
In 30 minutes we identify your readiness level and the next steps to be ready for enforcement. No obligation.