Data Protection Officer "DPO": Chile and Costa Rica

The Data Protection Officer (DPO) is positioned as a key figure in the governance of personal data, in charge of supervising regulatory compliance, advising organisations and acting as a point of contact with authorities and data subjects.

In Chile, its regulation is incorporated through Law No. 21.719, which amends Law No. 19.628, establishing its designation in the context of breach prevention models and defining specific functions such as supervision, training and promotion of good practices within the organisation.

In Costa Rica, on the other hand, there is no express regulation of the DPO. However, the principle of proactive responsibility has encouraged its voluntary adoption, especially in organisations seeking to align with international standards, such as the GDPR.

The incorporation of this figure strengthens compliance, improves risk management and consolidates an organisational culture oriented towards data protection, while its absence can increase exposure to sanctions and weaknesses in information management.