Actualidad

Ciberseguridad

Chile

On January 1, 2025, the Cybersecurity Framework Law came into force in Chile.

Among other issues, the law creates the National Cybersecurity Agency as the supervisory authority and introduces several principles applicable to entities: (i) damage control; (ii) coordination with the authority; (iii) responsible response; (iv) IT security; (v) rationality; and (vi) security and privacy by default and by design.

Banking, financial services and means of payment are considered “Essential Services”, which obliges them to report cyber-attacks and security incidents to the authorities within 3 hours; and to implement measures to prevent, report and resolve security incidents. Specific duties are also introduced for entities considered “Operators of Vital Importance”.

In addition, along with the entry into force of the rest of the provisions of the Law, the rules on requirements and procedure for reporting cybersecurity incidents to the national authority, as well as the taxonomy and classification of cybersecurity incidents are published.