Service · Law 21,719
Compliance that lives in your systems, not just a PDF.
On December 1, 2026 Chile's new data protection law takes full effect. We help you arrive prepared: clear diagnosis, technical implementation in your systems, and support to keep it healthy over time.
Why THINKBOX
Legal diagnosis + technical implementation, one counterpart.
Law 21,719 compliance doesn't end with a report: it requires reconfiguring systems, databases, forms and processes. We do both — the regulatory analysis and the implementation in your systems — so you don't have to translate between two vendors.
Legal side
- →Regulatory diagnosis
- →Privacy policy
- →Processing records
- →Risk assessment
Necessary, but not enough without changes in the systems.
Technical side
- →Consent flows
- →ARCO rights portal
- →Auditable encryption, logs and backups
- →Integration with existing systems
Necessary, but loses focus without Chilean regulatory judgment.
What THINKBOX does
- →Diagnosis with Chilean regulatory rigor (not copy-pasted GDPR)
- →Technical implementation executed by the person writing the code
- →Ongoing support to your company's data officer
- →One counterpart, responsible end-to-end
Both sides under the same accountability.
What we offer
Three levels, depending on where your company stands.
Diagnosis
Free
Self-assessment questionnaire with personalized PDF report. Identify gaps in 15 minutes.
- ✓Risk scoring by area
- ✓Prioritized action plan
- ✓Downloadable PDF report
- ✓Available in Spanish and English
Implementation
Fixed-scope project
Technical design and implementation of compliance: processing records, forms, ARCO rights portal, policies, security and logs.
- ✓Complete processing records
- ✓Consent and revocation mechanisms
- ✓Portal for exercising ARCO rights
- ✓Technical security measures (encryption, logs, backups)
- ✓Internal team training
Ongoing advisory
Monthly retainer
We support your internal DPO or whoever the law places the responsibility on. Records maintenance, policy review, and help on complex questions.
- ✓Monthly review of processing records
- ✓Policy and consent updates when operations change
- ✓Technical-legal backup for complex ARCO requests
- ✓Review of new flows before they go to production
- ✓Agreed monthly hours for consultations
How we work
Responsible, agile, no smoke.
01
Diagnosis
Online questionnaire or 60-min session. Report delivered in 5 business days.
02
Proposal
Detailed scope, deliverables, timeline and fixed price. If we can't help, we tell you.
03
Implementation
2-3 week sprints with real demos on client data. Code and documentation in your repository. We flag slippage as soon as we detect it.
04
Ongoing support
Optional monthly retainer to review new operations, update records, and back up the internal data officer when questions arise.
Real company
Not a freelancer with an invoice book.
THINKBOX SPA is established in Santiago since 2019, with Chilean tax ID, SII-authorized electronic invoicing, an office in Providencia and a standard contract. That matters when you hire a service the Data Protection Agency can audit.
- Tax ID
- 77.023.662-2
- Founded
- 2019
- Address
- Antonio Bellet 193 of. 1210, Providencia
- Invoicing
- SII electronic
Frequently asked
What people ask us most about Law 21,719.
Law 21,719 is Chile's new personal data protection law, published in December 2024 and fully effective from December 1, 2026. It applies to any natural or legal person that processes personal data of people in Chile, regardless of size or industry. That includes SMEs, public institutions, law firms, retail, healthcare, fintech, and any company with a website that collects emails.
Your question not here? Write to us. →
The shortest path to compliance is starting early.
An orderly technical implementation takes 4 to 10 weeks, plus time for the organization to adopt the changes. The closer we get to December 1, 2026, the tighter the calendar.