77 days until Law 21.719 comes into force (December 1, 2026).

Is your company ready for Law 21.719?

10 questions, 3 minutes. Instant result with the concrete gaps to close before December 1, 2026.

1Do you have a documented, up-to-date Record of Processing Activities (RAT)?
2Have you appointed a data protection officer with defined duties?
3Do you have a formal procedure to answer ARCO requests within the legal deadline?
4Do you obtain and record consent with verifiable evidence of when and for what?
5Do you have a security-breach management and notification procedure?
6Have you signed data processing agreements (DPA) with vendors that process data for you?
7Have you built an inventory of the personal data you process, its purposes and lawful bases?
8Have you updated your privacy policy to Law 21.719?
9Do you periodically train your staff on data protection?
10Have you assessed whether your high-risk processing requires an impact assessment (DPIA)?
11Do you process sensitive data (health, biometrics, socioeconomic data, minors)?

Get your gap report

We'll send you the detail of your assessment and recommended next steps for each gap.