The value of the DPO in navigating Chile's LPDP


Contributors:
Oliver Ortiz
CIPP/E
Senior manager
Deloitte Legal
Editor's note: The IAPP is policy neutral. We publish contributed opinion and analysis pieces to enable our members to hear a broad spectrum of views in our domains.
As Chilean companies navigate the country's new Personal Data Protection Law No. 21.719, technical and legal facilitators are critical who understand the complex legislative changes and can help organizations safeguard the privacy and integrity of information, while continuing to boost the digital economy.
This is where the data protection officer emerges. While the LPDP establishes the DPO role in Chile, this strategic figure must have a business vision in order to see how organizations can obtain the maximum value from their data, while respecting the dignity of citizens.
The role of the DPO should be understood flexibly. In addition to monitoring LPDP compliance, and being an essential point of contact between organizations and the newly created Personal Data Protection Agency, and between individuals and the data controller, the DPO also fills a consultative and training role. DPOs have the special opportunity to advise those working to mitigate privacy risks, including around the use of new technologies.
This is where the transformation of the role of the DPO can be appreciated, considering that in small and medium-sized European companies it has grown to tasks including implementing and supervising an ethical and responsible framework for artificial intelligence use.
The LPDP will fully take effect 1 Dec. 2026.
The benefits of a DPO
In July 2025, France's data protection authority, the Commission nationale de l'informatique et des libertés, studied the economic benefits of having a DPO. The CNIL stressed that DPOs enable a competitive advantage, help avoid penalties for noncompliance with personal data legislation, prevent data leaks and optimize data management.
Contributors:
Oliver Ortiz
CIPP/E
Senior manager
Deloitte Legal