Hall Of Fame

Leading Partners

Firms To Watch: Data privacy

Co-led by Andrea Abascal and senior associate Jorge Tisné NiemannBofill Mir Abogados‘ data and technologies practice routinely advises on compliance with Chile’s data protection legislation, as well as its relation to the EU’s General Data Protection Regulation; the team also assists with the implementation of models to prevent regulatory infringements, along with how to proceed when data breaches occur.
Claro & Cia.‘s six-member team is led by data protection, technology and IP law expert Paulina Bardón; flanking Bardón, associate Marisol Balbontín focuses her practice on data protection and cybersecurity, as well as litigation, arbitration, antitrust and economic regulation.
Established in November 2023 when it recruited Andrés Pumarino from Legal TrustContraloría Privada‘s Santiago data protection team is mandated to assist with the management and monitoring of data processing policies; the group is particularly active in the software development, financial services, banking, insurance, pharmaceutical, fintech, engineering, and construction sectors.
A specialised technology regulation boutique firm, GA - Abogados acts for small businesses and start-ups, as well as large companies, on data protection matters; the five-member department showcases founding partner and data protection and telecoms specialist, Raúl Arrieta Cortés, a co-chair and member of the International Association of Privacy Professionals.
The five-member data protection, cybersecurity and artificial intelligence practices at Prieto Abogados are headed up by counsel Romina Garrido, a former legislative adviser to the Ministry of Transportation and Telecommunications, who assists healthcare, transportation, telecoms and  retail clients with data management strategies, data-driven projects, data transfer agreements, and impact assessments.

Data privacy in Chile

Barros & Errázuriz

Characterised by its commitment to clients’, the five-member data privacy team at full-service firm Barros & Errázuriz has significant experience in drafting and implementing privacy policies. The practice’s expertise includes reviewing a range of agreements involving personal data transfers, and analysing the legal implications of clients’ business models in Chile. The group was recently particularly active in relation to Chile’s December 2024-enacted personal data legislation, which enhances personal data protection standards in line with European regulation; and the country’s newly-introduced cybersecurity law that requires companies to report incidents involving personal data to the newly-established National Cybersecurity Agency. Recent mandates include assisting American technology company Roku with improving its privacy policies, so as to ensure compliance with local data privacy regulations. With over 25 years’ experience in TMT matters, José Ignacio Ovalle is an experienced personal data protection practitioner; while former chief legal adviser at the Undersecretary of Telecommunications, Andrés Rodríguez, focuses on telecoms, IT and data privacy mandates. In the firm’s associate ranks, Certified Information Privacy Professional (CIPP/Europe), Magdalena Rojas assists with the adapting of clients’ processes and contracts to the applicable personal data protection legislation; and Fernanda Irrazabal is another key lawyer in the telecoms, technology and data protection group.

Responsables de la pratique:

José Ignacio Ovalle; Andrés Rodríguez


Les références

‘Characterised by its commitment to clients, its close relationships with them, and the speed with which it addresses clients’ legal issues. A great strength of the team.’

‘The speed with which they interact with their clients and respond to companies’ emergencies.’

« The firm is constantly up-to-date. »

Principaux clients

DirecTV Chile


DiDi


Empresas FT


Roku


Amazon Web Services


Coordinador Eléctrico Nacional


ATP Fiber Chile


Compass Group Chile


Principal Financial Group


NTT Data


Mundo Telecomunicaciones


One Web


Principaux dossiers


  • Advising DirecTV inChile on data privacy matters.
  • Advising DiDi on personal data matters.
  • Advising Roku on the refinement and improvement of its privacy policies.

Carey

The nine-strong data protection team at full-service firm Carey routinely advises companies on their privacy and data security policies and procedures. Home to specialists in cybersecurity and technology, in addition to privacy, consumer protection and compliance practice, the practice has significant experience in B2B (business-to-business) and B2C (business-to-consumer) matters. Alongside its advice on domestic data protection regulation, the practice covers privacy by design, data processing agreements, employees’ use of technological devices, cookie policies, legitimate interest tests and international data transfers. Other areas of focus range from codes of conducts and implementing cybersecurity tools, to assessing binding corporate rules, privacy policies, and terms and conditions of use. The practice’s experience additionally includes assisting with drafting Chile’s main privacy and cybersecurity bills, as well as the formation of cybersecurity bodies and organisations in Chile; and its industry expertise encompasses the retail, financial, fintech, insurance, technology, healthcare and pharmaceutical sectors. The department is co-led by Guillermo Carey, an adviser on data privacy matters, as well as IP, life sciences, and licensing, distribution and franchise agreements (among others); and counsel José Ignacio Mercado, a highly-regarded privacy, data protection and cybersecurity specialist. Associate-to-note Elias Mohor‘s experience includes data protection assessments for foundations, non-governmental organisations and trade associations.

Responsables de la pratique:

Guillermo Carey; José Ignacio Mercado


Les références

‘Great team in privacy practice, very dedicated and skilled. Well balanced division between senior and junior professionals, considering the complexity of each activity.’

‘Francisca Castillo, especially, is a very thoughtful, dedicated and efficient associate. She seems to have great experience in the area, always provides good advice, very business oriented.’

‘The relationship with Carey’s teams is more favourable than that of other firms, as they are more committed, approachable, and professional. There is a noticeable level of continuous updating of knowledge regarding current and upcoming legal changes.’

Principaux clients

Itrend


Pepsico


NotCo


Wild Foods


AmCham


AMDD


Boston Scientific


MetLife


ProVida


Grünenthal


Principaux dossiers


  • Assisting Boston Scientific with conducting a legal due diligence of its data processing activities, documents and policies.
  • Assisted Grünenthal with conducting a legal due diligence of its data processing activities, documents and policies.
  • Assisted MetLife and ProVida with conducting a legal due diligence of their data processing activities, documents and policies.

Magliona Abogados

With ‘expertise in personal data matters that is very difficult to find elsewhere’, Magliona Abogados' eight-strong data protection practice assists with drafting, implementing and enforcing privacy policies, in relation to image rights, the right to honour and privacy, and the protection and commercial exploitation of images and other privacy-related assets. Its client base ranges from media, telecoms, e-commerce and technology clients, to data centre businesses; recent mandates include advising on implementation processes for Chile’s December 2024-enacted personal data legislation. The department’s key practitioners are: Claudio Magliona, who, alongside data protection work, advises on corporate law, financing, technology, telecoms, entertainment law, along with intellectual and industrial property; M&A and consumer law specialist Giovanni Donati; and Nicolás Yuraszeck P, who focuses on new technologies, IP and telecoms law. Beyond the partnership at director level, Carlos Araya advises on the production of films, his assistance including both rights’ acquisitions and the exploitation of audiovisual works; Bárbara Reyes, an adviser on privacy, technology law, cybersecurity and the management of governmental relations; and Rodrigo Valenzuela, whose workload covers entertainment matters, new technologies and intellectual and industrial property. Notable growth for the practice includes the February 2025 promotion of corporate law expert Karla Cid to partner.

Responsables de la pratique:

Nicolas Yuraszeck; Giovanni Donati; Claudio Magliona; Bárbara Reyes


Autres avocats clés:

Diego Lisoni


Les références

‘The Magliona Abogados team has expertise in personal data matters that is very difficult to find elsewhere.’

‘They have the ability to apply their expertise to different products and services, and stand out from other law firms because their lawyers are more knowledgeable than the rest and are the ones who teach the data privacy courses in Chile.’

‘Clients highlight the closeness, speed and knowledge of the entire team.’

Principaux clients

Mercado Libre


Ascenty


Google


Falabella


Amazon Studios


DLocal


Convergint


Huawei


Tools For Humanity (Worldcoin)


LinkedIn


Airbnb


Microsoft Corporation


Globalization Partners


Dafiti


Netflix


Johnson & Johnson


Empresas Copec


ENTEL


Principaux dossiers


  • Advising Mercado Libre on data protection matters, including privacy policies and opt-out rules.
  • Advising Ascent on data protection aspects.
  • Advising Google on data protection issues.

Alessandri & Compañía Abogados

The five-member technology, cybersecurity and data privacy practice at Alessandri & Compañía Abogados assists clients with both adapting to new regulatory standards and advising on regulatory risks. ‘Technically very good and always up to date with what's happening in other jurisdictions’, clients additionally benefit from the group’s leveraging of the firm’s specialisms in IP, corporate law, finance, litigation, tax and labour matters; its sector expertise ranges from healthcare, banking, financial services, insurance, retail and food and beverage, to fintech, education, real estate and entertainment (among others). Recent mandates include advising Corporación Nacional del Cobre (Codelco) on compliance with Chile’s December 2024-enacted data protection legislation; and assisting gender diversity foundation, Fundación Iguales, with drafting a privacy policy for its new technological platform. Following the October 2025 departure of former practice head Macarena Gatica, the firm has moved swiftly to hire Carla Ilanes - formerly a counsel at DLA Piper Chile, whose trajectory also includes time in the public sector at the digital governance division of MINSEGPRES. She will co-head the practice with Rodrigo Velasco A (who also heads up the firm's technology and IP practices) and has particularly experience in data protection-related litigation. Illanes arrives accompanied by Elisa Matta (data protection, cybersecurity & AI) who joins an associate team consisting of Jaime Urzúa and María Ignacia Ormeño who both advise companies on the implementation of personal data protection and cybersecurity programmes - particularly in the insurance, health, retail and technology sectors.

Responsables de la pratique:

Rodrigo Velasco A; Carla Illanes


Les références

‘Alessandri’s team in this field is technically very good and always up to date with what’s happening in other jurisdictions. While there are many firms at this level, their proximity makes them very reliable.’

‘Jaime Urzúa is easy to talk to and communicate with and understands the technical aspects very well.’

Principaux clients

Tools for Humanity Corporation


Codelco


Fundación Iguales


Socovesa


Principaux dossiers


  • Advised Worldcoin, a project to create a global digital identity and universal cryptocurrency, on privacy policies.
  • Advising Corporación Nacional del Cobre on compliance with the new Chilean data protection legislation.
  • Assisting Fundación Iguales, a gender diversity foundation, with drafting a privacy policy for its technological platform for reporting gender diversity discrimination (ActuaApp).

DLA Piper Chile

DLA Piper Chile’s data privacy and protection experts in Santiago advise on compliance with Chile’s data protection laws and regulations, as well as data protection impact and legitimate interest assessments. A fast-growing area for the firm, the team also assists with all aspects of organisations’ data processing, along with data breach responses, notification obligations, risk assessments and mitigation. Other key areas range from evaluating the impact of new technologies - such as artificial intelligence, the internet of things, biometrics and blockchain - on data privacy; negotiating agreements, providing employee training; and advising on international data transfers, including the EU’s General Data Protection Regulation. The data privacy practice group’s principal figures are technology specialist Jorge Timmermann, an adviser on data privacy, along with fintech, open banking and digital payments; and counsel and data protection and information security expert Carla Illanes, who ‘provides very specific and useful legal opinions’, and focuses on data collection and processing, designing and implementing privacy and security policies, audits and risk assessments, data transfer strategies, and compliance programmes. The practice group was notably strengthened in October 2025 when the firm hired Macarena Gatica - formerly data privacy practice head at Alessandri & Compañía Abogados - who advises across data protection, technology, cybersecurity and e-commerce.

Responsables de la pratique:

Carla Illanes; Jorge Timmermann; Macarena Gatica


Les références

‘Clients appreciate the multi-disciplinary nature of the DLA Piper team. While data privacy is a very specific topic, it requires the support of other areas such as labour, which enriches the quality of the deliverables.’

‘Clients absolutely commend the work that Carla Illanes does.’

‘A delight to work with Carla Illanes and she’s very knowledgable.’

Albagli Zaliasnik

The IP, technology and data group practice at Albagli Zaliasnik covers the implementation of Chile’s data protection legislation. The team is experienced in audits and data mapping, data processing compliance, infringement prevention programmes, adapting privacy policies, and data protection officer services. It also assists with personal data transfer-related hirings, M&A-related database due diligence, personal data protection training, and personal data disputes. The ‘completely reliable’ group additionally advises on product-related privacy impact assessments, database usage legality reviews, and record processing activities. Department head Eugenio Gormáz is a highly-regarded IP specialist; technology director ( an October 2024 recruit and member of the San Miguel Court of Appeals), Ivonne Bueno, advises public and private entities on personal data protection matters; and the workload of senior associate Antonia Nudman also encompasses data protection work. In 2024, former director Francisca Franzani and associate Constanza Pasarin left the firm in May and March, respectively.

Responsables de la pratique:

Eugenio Gormáz


Les références

‘Evaluating the experience with az, clients highly value their compliance with the projections outlined in the initial work plan and budget.’

‘Adaptable to any changes or setbacks that may arise on the client’s side during the development of each project, thus ensuring they are completely reliable.’

‘The team is very responsive.’

Principaux dossiers


Bitlaw

Boutique law firm Bitlaw is home to experts in privacy, fintech and new technology-related contracting, as well as cybersecurity, artificial intelligence and e-commerce; moreover, in addition to technology, the practice has notable financial and retail sector expertise. The group is jointly led at founding-partner level by Paulina Silva, a longstanding adviser to company clients on privacy (and its management), along with cybersecurity and e-commerce; and Javiera Sepúlveda, who ‘demonstrates solid subject matter knowledge’ and specialises in privacy, technology contracting, software protection strategies, electronic signatures, e-commerce, and IP. In the associate team, senior María José Díaz specialises in privacy matters.

Responsables de la pratique:

Paulina Silva; Javiera Sepúlveda


Les références

‘The working dynamic with Bitlaw stands out for its close relationship with the client.’

‘Continuous and varied instances of communication (WhatsApp groups, emails, specific work meetings, periodic follow-up meetings), and an ability to adapt to internal platforms (use of shared folders, shared follow-ups and real-time editing), which allow clients to achieve excellent work.’

‘Issues such as billing are handled in a very precise and transparent manner, with great detail that allows clients to identify what has been worked on and make enquiries or necessary adjustments if necessary.’

Principaux clients

AFP Habitat


Aleatica


Amipass


Archivo Nacional


Atlas


Coopeuch


Caja Los Andes


Cardif


CMPD


L’Oréal


Redbanc


SAAM


SMU


Transbank


Principaux dossiers


  • Assisted Caja de Compensación Los Andes (and its affiliates Tapp, CLA Turismo and CLA Digital) with conducting a complete privacy compliance evaluation.
  • Advising COOPEUCH on data protection matters on an ongoing basis.
  • Advising SMU on its privacy strategy on an ongoing basis.

Cariola Díez Pérez-Cotapos

Fielding team members who are certified in cloud services, Cariola Díez Pérez-Cotapos' data privacy group is best known for its technology credentials. The 14-strong department advises significant clients from the health, education and financial sectors on personal data issues, including compliance with the December 2024-enacted data protection legislation. Rejoining the firm in June 2024 (from financial-sector technology company Redbanc), the wide-ranging expertise of technology, privacy and media group head Carolina Flisfisch includes, data privacy mandates. In the associate pool, senior Gabriel Pensa advises on data protection; while Eduardo Vilches focuses on technology, cybersecurity and privacy issues, including personal data and information security.

Responsables de la pratique:

Carolina Flisfisch


Principaux clients

Redbanc


Google


IBM


Banmédica Holding


Mercado Libre


DUOC UC


Soprole


Kyndryl


BHP


Blue Express


UC Christus


CCU


Equifax


INACAP


B Braun


Principaux dossiers


  • Advised CCU on the assessment and implementation of Law 21 719 on personal data protection.
  • Advised Holding Banmédica on a governance framework to be implemented, in relation to the new regulations on personal data protection and cybersecurity.
  • Advised Equifax on compliance with Law No 21,719 on personal data protection.

Guerrero Olivos

Guerrero Olivos' eight-member data privacy group comprises experts in regulatory, corporate and technology law, as well as cross-border transactions where data privacy plays a key role. ‘Characterised by its technical expertise’, the practice recently assisted with the compliance side to Chile's newly-enacted Data Protection Law; examples include advising healthcare software business Dedalus on adapting its global privacy framework to Chile’s new legal standards, the assistance requiring the review of privacy policies and data governance protocols. The team also advised food company Empresas Carozzi on its data protection-related compliance transformation. With longstanding experience in advising TMT companies, Juan Enrique Allard's practice covers data privacy, along with telecoms, IT, cybersecurity and new technology platforms. In the senior associate group, recent highlights for IP specialist Diego Morandé include spearheading the creation of the Data Protection Trade Association, such association established at the firm’s office and involving participation by both public and private sector organisations.

Responsables de la pratique:

Juan Enrique Allard; Diego Morandé


Les références

‘Guerrero Olivos is characterised by its technical expertise.’

‘Clients can trust that they will provide the right answers to all enquiries, no matter how diverse.’

‘They are always in touch and respond quickly.’

Principaux clients

Dedalus


Ufinet


WOM


Telefónica Group


Empresas Carozzi


Globalstar


Bizagi


Odata


SoftServe


Aryaka


Manhattan Associates


Vinko


Western Union International


Datamind


Kumon


Europ Assistance Group


Principaux dossiers


  • Assisted Dedalus, a global healthcare and diagnostic software provider, with reviewing its global privacy policy.
  • Advised Empresas Carozzi on Chile’s new data protection legislation.
  • Advising Datamind, a Chilean technology company specialising in business intelligence and data analytics solutions, on technology agreement-related data privacy matters.

CMS Carey & Allende

Well known for handling a range of IT and telecoms matters, CMS Carey & Allende acts for both domestic and overseas clients on Chile’s data protection legislation. In relation to international clients, the team assists with adapting and implementing data protection policies in Chile with regard to the EU’s General Data Protection Regulation. Heading up the practice, Ignacio Errazquin is a telecoms expert who is also experienced in data protection-related public policy and regulatory issues. In 2024, former partner Diego Rodríguez and associate Isidora Rencoret departed the firm in April and August, respectively.

Responsables de la pratique:

Ignacio Errazquin


Autres avocats clés:

Andrés Schwerter


Principaux clients

Sonda


E-digital


CORFO – Colaboratech


G-Care


E-Digital


I-Hunt


Cyrus


Principaux dossiers


  • Advised TikTok on matters related to the operation of products and services, which are associated with the monetisation of ByteDance’s platforms (mainly TikTok) in Chile.

FerradaNehme

FerradaNehme‘s four-member practice has extensive experience in the application of the EU’s General Data Protection Regulation (GDPR). The firm, which also fields specialists in Chile’s recently-enacted Data Protection Law, is experienced in negotiating data processing agreements and performing data protection impact assessments. It also advises on legitimate interest and transfer impact assessments, along with preparing processing activity records and drafting privacy policies. With ‘extensive practical experience in the field’, the practice has further developed risk matrixes to identify, assess, and prioritise data protection risks. In addition to her litigation experience, pharmaceutical, education and technology sector expert Stella Muñoz  routinely advises on data protection-related compliance issues; and senior associate Bernarda Muñoz, who ‘provides a professional, friendly and first-class service’, assists with EU-related personal data protection work.

Responsables de la pratique:

Stella Muñoz


Les références

‘What makes this practice unique is that Ferrada Nehme is a firm that knows us as a company and understands how we are structured. This allows them to identify the types of personal data we handle in order to provide advice that is more specialised to our needs. Furthermore, they have highly skilled professionals who are experts in the relevant fields.

Bernarda Muñoz is a lawyer with exceptional communication skills, a helpful attitude, and a profound understanding of technology and its impact on personal data. We love working with her.’

‘Well-versed in the practices, they ask the right questions, and are capable of efficiently conducting data-driven analysis.’

Principaux clients

Novo Nordisk Farmacéutica


SKY Airline


Gimnasios Chile


Inversiones O Dos


Gimnasios Chile NLC


Corporación Educacional Alianza Francesa-Santiago


Brother International Corporation


Natura Cosméticos


Marsh Corredores de Seguros


CAP


Zurich Chile Seguros de Vida


GC Rent Chile


Principaux dossiers


  • Advising Gimnasios Chile, Inversiones O Dos and Gimnasios Chile NLC on privacy policies, international data transfers, data protection clauses in contracts with third parties, employee training, and implementing data governance structures.
  • Advising SKY Airline on a wide range of data protection issues relating to its customers and employees, as well as negotiating data processing agreements with vendors and strategic partners.
  • Providing Novo Nordisk Farmacéutica with a comprehensive assessment of its activities to ensure compliance with Chile’s new Personal Data Protection Act.

H&Co Abogados

Specialist new technology, personal data protection and digital regulation law firm H&Co Abogados has ‘deep and comprehensive knowledge of data protection practices’. The practice acts for clients from the financial services, retail, education, media, transport, mining, energy and pharmaceutical sectors on data protection matters. Focused on the personal data that is handled by companies and institutions, the five-member team’s assistance includes the provision of tailored regulatory compliance models.  ‘One of the most respected voices in the personal data field’, firm founder and department head Felipe Harboe has significant experience in advising large companies in Chile and abroad on data protection. The practice of senior associate and digital regulation expert Jose Miguel Catepillan encompasses data protection-related regulatory compliance, as well as risk mitigation work.

Responsables de la pratique:

Felipe Harboe


Les références

‘What distinguishes this firm is its expertise and experience, which are characterised by Felipe Harboe, one of the most respected voices in the personal data field. Given that this is such a critical area for business development, having top-notch strategic advice is essential.’

‘Having been part of the creation of the current legal system regarding personal data gives Felipe Harboe an authority on the subject that is difficult to replicate.

‘The team has deep and comprehensive knowledge of data protection practices.’

Philippi Prietocarrizosa Ferrero DU & Uría

The five-member data protection team at full-service firm Philippi Prietocarrizosa Ferrero DU & Uría is home to TMT, corporate and regulated markets specialists. The group’s track record includes advising Ford on personal data protection matters, while other notable clients include SMU, Mondelēz International and the International Institute of Culinary Arts and Services. The practice is led by TMT and energy sector expert Eduardo Escalona, who focuses on the economic regulation of public services along with co-leading the firm’s digital desk initiative. In the associate ranks, Constanza Azócar advises local and international clients on personal data protection.

Responsables de la pratique:

Eduardo Escalona


Autres avocats clés:

Antonio Valenzuela


Principaux clients

Ford


SMU


Mondelēz International


International Institute of Culinary Arts and Services


Principaux dossiers


  • Advising Ford on personal data protection matters.
  • Advising SMU on e-commerce matters, including privacy policies.
  • Advising Mondelēz on personal data matters.

Urenda, Rencoret, Orrego y Dörr

Urenda, Rencoret, Orrego y Dörr's six-strong team handles a range of data protection work, including related labour law matters. Its expertise further covers the implications of the EU’s General Data Protection Regulation; and assisting foreign entities with the development and alignment of their data privacy policies with Chile’s data protection regulations. Alberto Rencoret advises both domestic and foreign clients on labour-related data protection issues; and Nicholas Mocarquer assists international entities with the implementation of data privacy policies. At associate level, Bernardita Schmidt advises on data protection-related regulatory compliance and policy development work; Verónica Roa assists with data protection policies; and both Constanza Monckeberg and Andrea Harlen have experience regarding Chile's recently-enacted data protection law.

Responsables de la pratique:

Nicholas Mocarquer; Alberto Rencoret


Principaux clients

Dow


Thomson Reuters


Pearson


Ferrero Group


Grupo Marina


Aceros Aza


International Data Corporation


Sony


Viña Veramonte


LSEG


Disan


Principaux dossiers


  • Advising Sony on data privacy matters.
  • Advising Thomson Reuters on data protection matters.
  • Advising Refinitiv on data privacy matters.