DATA PROTECTION · LAW 21.719

Comply with the Data Protection Lawwithout missing a single deadline.

For any company bound by the law. A management platform —not a system that decides for you— to answer Law 21.719 end to end: consents, data-subject rights, processing register, breaches and evidence. Your team keeps control of every case.

  • Data-subject rights
  • Breaches in 72 h
  • Chain of evidence

THE PROBLEM

The law is in force. Email and spreadsheets won't cut it.

Law 21.719 brings short deadlines, rights enforceable from day one, and escalating fines. Handling consents, requests and breaches over email and spreadsheets leaves the company with no control of the deadline and no evidence to show when the Agency asks.

CASE

An access request arrives with no record.

A data subject requests access to their data. The team doesn't know when the legal deadline expires, has no history of prior responses and no evidence of the consent they signed.

BEFORE

No control

unmonitored deadline, risk of sanction

WITH ALICANTO

Managed

automatic deadline and full history

HOW IT WORKS

From legal obligation to a process under control.

01

You build your Processing Register

You inventory how you process personal data (the RAT): purpose, lawful basis, categories and retention periods. The platform flags where an Impact Assessment is missing.

02

You capture consents with evidence

You publish versioned forms and a widget that embeds into your site. Each consent stores the exact text the data subject accepted.

03

You handle rights and breaches with the clock running

Every ARSOP request and every breach enters with its legal clock. A traffic light warns you before it expires and records each step.

WHAT'S INCLUDED

Everything Law 21.719 requires,

in one place with evidence.

Versioned consents

Forms with versioning and an integrity hash, plus an embeddable widget to capture consent on your site. It stores the exact text that was accepted.

ARSOP rights with deadlines

Access, rectification, erasure, objection, portability and blocking. Automatic 30-day legal deadline, with acknowledgement and a data-subject portal.

RAT and Impact Assessment

A living, exportable Record of Processing Activities, with an Impact Assessment (DPIA) for high-risk processing.

Breaches in 72 hours

Incident record with the 72-hour clock toward the Agency. Risk triage, notification to data subjects and closure, all traced.

DPO and Prevention Model

Appointment of the Data Protection Officer and an Infringement Prevention Model (Decree 662) with signed acknowledgements from staff.

Chain of evidence

A cryptographically sealed, chained log. Every action is proven and verifiable for an inspection.

WHY IT HOLDS UP

Not a spreadsheet with a new face.

Evidence that survives an inspection.

Ready for an inspection

You export the full case file —consents, requests and breaches with their sealed log— as one ordered evidence pack. Whatever the Agency asks, whenever it asks.

Data subjects serve themselves

They exercise their rights and review their consents in a dedicated portal, without overloading your team. The privacy notice is generated automatically from your register.

Automatic legal deadlines

Business days with Chilean holidays built in. The traffic light warns before the deadline, not after.

Per-client isolation

Each company runs in its own instance, with encryption and row-level access control.

LET'S TALK

See your compliance live.30 minutes, with your real case.

We show you how to build the RAT, capture consents and handle rights with deadlines. Together we size up what you need to stay current with Law 21.719.