Legal regulation of cybersecurity in the Republic of Chile

This article focuses on the analysis of the new Cybersecurity Law of the Republic of Chile No. 21.663, which entered into force on March 26, 2024. This law establishes the legal and institutional framework, principles, and general rules for structuring and coordinating cybersecurity activities in the country. The article reveals the key provisions of the law, the rules delineating responsibilities between essential service providers and operators of vital importance, as well as the obligations, infractions, and penalties applicable to them. The paper examines the new institutional structure of cybersecurity, headed by the National Cybersecurity Agency (ANCI), and describes the principles of coordination and regulation within this system. It discusses the infractions and penalties for non-compliance with the law, with infractions being classified as minor, serious, and very serious, depending on factors such as the risk to personal data, intention, and damage caused. The author emphasizes that the list of definitions and guiding principles presented in the text of the law will play a significant role in the interpretation and implementation of the law at all levels and will have a significant impact on other regulatory bodies, thereby ensuring the coherence of actions and measures related to cybersecurity at the national level.