Detailed overview
Chile does not currently have an enacted comprehensive AI Act. Chile has a national AI policy and several legislative initiatives, including a bill intended to regulate artificial intelligence systems.
Boletín 16821-19
The main AI bill is Boletín 16821-19, which seeks to regulate AI systems. It was introduced in 2024 and is proceeding through the legislative process. Official congressional materials show that the bill is still in process and should not be treated as enacted law until approved and published.
National AI Policy
Chile's national AI policy provides strategic direction for AI development, governance, ethics, innovation and public-sector use. It is relevant for understanding Chile's future regulatory direction, but it does not create a full binding AI compliance regime by itself.
Current compliance
Current AI compliance in Chile depends on existing laws. AI systems involving personal data, consumer services, financial products, healthcare, employment, advertising, intellectual property, public administration or criminal conduct may trigger existing legal obligations.
Penalties
Chile does not currently have one AI-specific penalty table. Penalties depend on the breached legal framework, such as data protection, consumer protection, employment law, financial regulation, healthcare regulation, intellectual-property law or criminal law.
Practical requirements & details
Sourced from the Chilean National AI Policy (2021), the AI Bill (Boletín 16821-19), the Personal Data Protection Law (Law 19.628) + 2024 reform (Law 21.719), CMF and ISP guidance.
Proposed AI Bill (Boletín 16821-19) — not enacted
- Risk-based with prohibited, high-risk, limited-risk and minimal-risk categories.
- Governance duties: risk assessment, transparency, human oversight, human-in-the-loop.
- National AI authority designation expected (likely SUBTEL or a new body).
- Penalty range under negotiation — up to 4% of annual revenue for serious breaches.
National AI Policy + Action Plan
- Enabling factors, AI development and adoption, governance and ethics, international action.
- Concrete actions to 2030.
Data protection reform (Law 21.719, effective Dec 2026)
- GDPR-aligned regime with new Personal Data Protection Authority.
- Lawful bases, DPIAs, breach notification, DPO requirement for certain processors.
- Fines up to 4% of annual revenue with maxima up to ~USD 1.5M for serious violations.
Sector overlays
- CMF on AI in banking, insurance and capital markets.
- ISP on AI medical devices.
- Consumer protection (SERNAC) for AI-driven misleading practices.