Araya & Cía.’s Personal Data Protection Area provides comprehensive legal advice aimed at supporting companies in the adaptation, implementation, and compliance with Law No. 21,719 in Chile.
Our team advises organizations across different industries on the review of their internal processes, policies, contracts, and personal data processing mechanisms, with the objective of reducing legal, operational, and reputational risks.
We assist our clients in identifying compliance gaps, organizing their databases, preparing legal documents, and implementing practical measures that enable them to move toward a responsible, documented, and sustainable management of the personal information of clients, employees, suppliers, users, and third parties.
WE ADDRESS THE FOLLOWING ASPECTS IN THIS AREA:
- LEGAL COMPLIANCE DIAGNOSIS IN PERSONAL DATA PROTECTION MATTERS.
- MAPPING AND ORGANIZATION OF DATA PROCESSING ACTIVITIES, DATABASES, PURPOSES, INTERNAL CONTROLLERS, AND INFORMATION FLOWS.
- DESIGN OF ACTION PLANS FOR COMPLIANCE WITH LAW NO. 21,719, ACCORDING TO THE COMPANY’S SIZE, INDUSTRY, LEVEL OF EXPOSURE, AND VOLUME OF DATA PROCESSED.
- DRAFTING AND REVIEW OF PRIVACY POLICIES, CONTRACTUAL CLAUSES, CONSENTS, AUTHORIZATIONS, AND INTERNAL PROTOCOLS.
- ADVICE ON THE IMPLEMENTATION OF MECHANISMS TO RESPOND TO THE EXERCISE OF RIGHTS BY PERSONAL DATA SUBJECTS.
- REVIEW OF CONTRACTS WITH CLIENTS, EMPLOYEES, SUPPLIERS, DATA PROCESSORS, AND THIRD PARTIES THAT ACCESS PERSONAL INFORMATION.
- PREPARATION OF SUPPORTING DOCUMENTS FOR AUDITS, INSPECTIONS, CLAIMS, OR REQUIREMENTS FROM AUTHORITIES.
- LEGAL SUPPORT IN THE IMPLEMENTATION OF INTERNAL COMPLIANCE MEASURES AND RISK MANAGEMENT ASSOCIATED WITH PERSONAL DATA PROCESSING.
- TRAINING FOR INTERNAL TEAMS ON BEST PRACTICES, RESPONSIBILITIES, AND OBLIGATIONS REGARDING PERSONAL DATA PROTECTION.
- PREVENTIVE LEGAL ADVICE TO REDUCE THE RISK OF SANCTIONS, LEGAL DISPUTES, LOSS OF TRUST, AND REPUTATIONAL DAMAGE.
The service may be developed in stages, beginning with an initial diagnosis and subsequently moving toward document implementation, team training, and ongoing support, according to each company’s needs.





