Chile

Data protection in Chile

Prepare the processes, responsibilities and systems that handle personal data in your organisation.

A programme connected to the operation

The work begins by identifying how personal data enters, moves through and leaves the organisation. Priorities are then agreed with the relevant legal and process owners.

01

Data and processing inventory

02

Responsibilities and supplier arrangements

03

Procedures for requests, retention and incidents

04

Technical controls and staff preparation

Review the complete AI data flow

Where AI is involved, the review considers what data is sent, to which provider, for what purpose and under what conditions. Hosting a system in the client’s environment does not, by itself, describe every processing location.

Build evidence appropriate to the scope

Policies, procedures, impact assessments when applicable and operating records serve different purposes. The programme defines what each needs to demonstrate and how it will be maintained.