← Back to Impact Lab
Bendita IA × FinteChile

Legal Wiki Chile

Regulation, translated for you.

Before you build, you need to understand the terrain. This wiki is your curated source of regulatory context — no lawyer-speak, in the language of builders.

Regulation by track
Financial Inclusion
Law 21.521, CMF circulars, SII regulations
CMF circulars, regulated institution records
Citizen Cybersecurity
Law 19.223, Law 21.459, Law 21.663
CSIRT reports, CMF alerts, malicious URL databases
Data Protection
Law 19.628, Bill 21.719
Complaint records, transparency regulations

Fintech Law — Law N° 21.521

What it regulates, who it protects, why it matters

Chile approved Law N° 21.521 on January 12, 2023. It is one of the most comprehensive fintech regulations in Latin America.

The law exists but is written in dense legal language, distributed across disconnected government portals, and is inaccessible to the average citizen.

Crowdfunding and crowdlending
Invest $50,000 CLP in a project from your phone
Digital payments and wallets
Pay with QR at the market, transfer money by app
Digital assets
Buy fractional shares or cryptocurrencies
Robo-advisors
Apps that tell you where to invest based on your profile
Open Finance
Your financial data belongs to you — move it between platforms
Right to clear information — fintechs must explain in understandable language
Personal data protection — explicit regulation on handling your info
Complaint system — formal channel for disputes with fintech platforms
Portability — your financial data belongs to you (Open Finance)
RegulationTopicRelevance
Art. 1-2Object and definitionsScope of the law
Art. 12-15Provider registryWhich companies are regulated (CMF public data)
Art. 29-33Open FinanceAPIs, data portability
Art. 40-44Regulatory sandboxInnovation testing space
Art. 50-55Client protectionRights, complaints, transparency
5 million Chileans could benefit from this law, but cannot understand it.

CMF — Financial Market Commission

The regulator: public data, circulars, APIs

The CMF decides which financial companies can operate in Chile, how they must treat customers, and what happens when they break the rules.

Regulated institutions registry
CSV/API — all authorized financial companies
Circulars and regulations
Rules by institution type (PDF/HTML)
Complaint registry
Complaint statistics by institution (CSV)
Scam alerts
Unauthorized entities, detected fraud
Fintech registry (Law 21.521)
Authorized financial service providers
RegulationTopicRelevance
Circular 2.345Fee transparencyTrack: Financial Inclusion
Circular 2.379Cybersecurity risksTrack: Cybersecurity
Circular 2.355Personal data in FIsTrack: Data Protection
NCG N° 502Open FinanceAll tracks

SII — Internal Revenue Service

Fintech tax obligations, public data

The SII manages and enforces taxes in Chile. Every fintech must comply with specific tax obligations — and so must their users.

An entrepreneur in Temuco fails her fintech tax obligations. Not because she avoids them, but because the SII portal assumes she speaks bureaucratic language.

If you sell on digital platforms
You must issue electronic receipts
If you receive fintech payments
These are taxable income
If you invest in crowdfunding
Gains are taxed as income
If you use cryptocurrencies
SII considers them taxable "digital assets"
If you freelance via fintech
You must file as independent worker
RegulationTopicRelevance
Res. Ex. 36/2021Crypto assetsCrypto is taxed: buying, selling, mining, staking
Circular 58/2020Digital economyPlatforms must report to SII
Res. Ex. 112/2021Fintech and receiptsDocument issuance obligations
+1.8 million microenterprises in Chile. Less than 30% understand their digital tax obligations.

Financial Consumer Protection

Rights, complaints, fee transparency

Everything a digital financial services user should know — but no one has explained.

+120,000 financial complaints per year to SERNAC. Top 3 reasons: unauthorized charges, product issues, difficulty terminating contracts.

Truthful information
Fintechs must tell you EVERYTHING before you sign
Product comparison
Right to standardized info to compare providers
Contract termination
You can close your account without obstacles
Data protection
They need your explicit consent
Financial portability
Move your history between banks/fintechs
Formal complaint
File complaints with CMF or SERNAC
Non-discrimination
Cannot deny service based on gender, age, location
Financial education
Right to understandable explanations
RegulationTopicRelevance
Law 19.496Consumer rightsLegal protection base
Law 21.521Fintech LawFintech-specific rights
Law 20.555Financial SERNACReinforced protection
Fintech complaints growth: +60% annually. Resolution in consumer favor: ~45% of cases.

Cybersecurity & Digital Fraud

Threats, CSIRT, financial phishing, incident data

+800,000 digital fraud attempts per year in Chile. 70% of victims do not report. Elderly are the most vulnerable group.

Financial phishing grew +35% year-over-year. Digital fraud losses exceed USD $200M annually in the region.

Financial phishing
45% of digital fraud in Chile
Vishing (voice phishing)
Calls impersonating banks — especially targeting elderly
Smishing (SMS phishing)
Chile in LATAM Top 5 for SMS attacks
Identity theft
Stolen data used to open fraudulent accounts
Social media scams
"Double your money with crypto" — explosive growth
RegulationTopicRelevance
Law 21.459Computer crimesCriminalizes phishing, fraud, unauthorized access
Law 21.663Cybersecurity frameworkCreates ANCI, strengthens CSIRT
72 hours — average time for a victim to detect they were attacked.

Datasets & APIs Available

Inventory of real data for the Lab

The data teams will have available during the Impact Lab. Curated by the organizing team, ready to connect with Claude MCPs.

CMF — Institution registry
CSV — authorized banks, fintechs, insurers ✅
CMF — Circulars and regulations
PDF/HTML — rules by institution type ✅
CMF — Complaints and alerts
CSV/HTML — complaints and detected scams ✅
SII — Tax regulations
PDF/HTML — digital taxation resolutions ✅
CSIRT — Incident reports
HTML/PDF — national security alerts ✅
PhishTank / URLhaus
REST API — phishing and malware URLs ✅
+USD $2,000 in Claude API credits per participant. Claude Code, Agent SDK and pre-built MCPs included.