No. As of 22 September 2026, the postponement of Law 21.719 had not become law: Bill 18.623-07 is still at its first stage in the Senate and proposes moving the effective date to 1 December 2027. Until it is published in the Diario Oficial, the legal date in Chile remains 1 December 2026.
The essentials in 30 seconds
- The date in force is still 1 December 2026: the postponement is a bill, not a law.
- As of 22 September 2026, the bill was still at its first constitutional stage in the Senate, with «suma» (high) urgency.
- It proposes moving entry into force to 1 December 2027 and raising the Agency's Board from three to five members.
Legislative status reviewed as of 22 September 2026. This summary distinguishes the date established by law from the changes proposed in Bill 18.623-07. If you want the full picture, start with our guide to the data protection law in Chile.
Has the entry into force of Law 21.719 been postponed?
As of 22 September 2026, no. Bill 18.623-07 proposes 1 December 2027, but it is a bill at its first stage in the Senate. The date established by Law 21.719 remains 1 December 2026.
What does the bill's single article change?
The bill has a single article with four items, plus two transitory provisions of its own. Item 1 amends article 30 quáter: it raises the Agency's Board from three to five members, keeps the six-year term with no reappointment, adds that the Board will be partially renewed every two years, and raises the quorum from two to three members.
| Matter | Current text of Law 21.719 | What the bill proposes |
|---|---|---|
| Entry into force | First day of the twenty-fourth month after publication: 1 December 2026 | 1 December 2027 |
| Composition of the Board | Three members | Five members |
| Board quorum | Two members | Three members |
| Term and renewal | Six years, no reappointment | Six years, no reappointment, with partial renewal every two years |
| First appointment of the Board | Six months before entry into force | No later than twelve months before entry into force |
| Written warning in the first twelve months | Only for companies qualified as smaller enterprises | For every entity bound by the law, remaining discretionary |
What is Bill 18.623-07 and what stage is it at today?
The bill entered the Senate on 1 September 2026 and was referred to the Committee on Constitution, Legislation, Justice and Regulations (and to the Finance Committee where applicable). As of 22 September 2026 it remained at its first constitutional stage, awaiting that committee's first report, and the Executive had renewed its «suma» urgency. Its introduction does not itself change the effective date.
| Item | Value |
|---|---|
| Bill number | No. 18.623-07 |
| Origin | Message from the President of the Republic (No. 110-374) |
| Signed | 31 August 2026, Santiago |
| Filed | 1 September 2026, Senate |
| Stage | First constitutional stage |
| Committee | Constitution, Legislation, Justice and Regulations (first report) |
| Status as of 22 September 2026 | In process, with «suma» urgency. Not law. |
What to do now: the answer is not to wait
The proposal does not remove data protection obligations. Continue preparing and check legislative progress before changing the compliance schedule.
- Keep 1 December 2026 as the planning date until there is publication in the Diario Oficial.
- Build the processing inventory and the lawful bases: it is the foundation for everything else and depends on no postponement.
- Prepare the information required by article 14 ter and the procedures for handling ARSOP rights.
- Review contracts with processors and the regime for international transfers.
Thinking of moving your compliance plan because of the postponement?
Let us review your company’s progress and the next steps to prepare for compliance.
Schedule an assessmentFrequently asked questions
What is Bill 18.623-07?
It is the bill amending Law 21.719. It was initiated by a message from the President of the Republic, signed on 31 August 2026 and filed with the Senate on 1 September 2026. It contains a single article with four items and two transitory provisions.
What would happen to the first year's written warning?
Today the sixth transitory article limits that Agency power to companies qualified as smaller enterprises during the first twelve months in force. The bill removes the limitation and would make it applicable to every entity bound by the law. It remains discretionary and is entered in the National Register of Sanctions and Compliance.
Have the regulations under Law 21.719 also been postponed?
No. The regulatory framework is advancing separately: Decree 662 of the Ministry of Finance, governing the implementation, certification, registration and supervision of the infringement prevention models under article 49, was published in the Diario Oficial on 9 September 2026.
What is the effective date of Law 21.719 today?
1 December 2026. That is the date set by the first transitory article of Law 21.719, published on 13 December 2024. Bill 18.623-07 proposes replacing it with 1 December 2027, but that change would only take effect if the bill is passed, enacted and published in the Diario Oficial.
Why does the Government propose postponing Law 21.719?
According to the presidential message, the entry into force should match the actual set-up of the Personal Data Protection Agency, and its Board does not yet exist: on 19 May 2026 the Senate rejected the proposed board members by 19 votes to 12, when two-thirds of the sitting senators were required.
What would change in the Agency's Board?
It would grow from three to five members, and the quorum from two to three. Renewal every two years already exists in Law 21.719; the bill changes it from «individual» to «partial». The first appointments would be made no later than twelve months before the effective date, with staggered terms: two members for two years, two for four and one for six.
What does it mean that the bill is at its first constitutional stage?
It is still in its chamber of origin, the Senate, awaiting the first report of the Committee on Constitution, Legislation, Justice and Regulations. To take effect it must be passed by the Senate and the Chamber of Deputies, then enacted and published in the Diario Oficial. Until then, the date of Law 21.719 does not change.
Should companies wait for the postponement before starting to comply?
It is not prudent. While the bill is not law, the obligations of Law 21.719 apply from 1 December 2026. The regulatory framework is also moving: Decree 662, governing infringement prevention models, was published on 9 September 2026. Starting the assessment early reduces risk in either scenario.
Official sources
- Law 21.719 — official text, Library of the National Congress of Chile
- Law 19.628 consolidated with the amendments of Law 21.719 (version in force from 1 December 2026)
- Decree 662, Ministry of Finance — regulation on infringement prevention models
- Bill tracking — Senate of the Republic of Chile
- Senate of Chile — release “Desestiman propuesta de consejeros para la Agencia de Protección de Datos”
- Diario Oficial of the Republic of Chile
This article is for information purposes only and does not constitute legal advice for a specific case.