Is Sharing Passwords Legal in Chile After the 2026 Regulatory Updates?

No, sharing passwords in Chile violates cybersecurity laws unless explicitly permitted by the service provider. The Ley de Delitos Informáticos (Law 21.459) criminalizes unauthorized access, while the Ley de Protección de Datos Personales (Law 19.628) imposes liability for data breaches. The Subsecretaría de Telecomunicaciones (SUBTEL) enforces compliance, with 2026 amendments tightening penalties for negligent credential sharing.

Key Regulations for Sharing Passwords in Chile

  • Ley 21.459 (Art. 2): Unauthorized password sharing constitutes a delito informático, punishable by up to 5 years’ imprisonment if it enables data theft or system compromise. Courts interpret “unauthorized” broadly, including shared credentials for corporate or banking accounts.
  • Ley 19.628 (Art. 7): Data controllers must implement technical safeguards to prevent unauthorized access. Sharing passwords breaches this duty, exposing entities to fines up to 1,000 UTM (~$85,000 USD) under the Servicio Nacional del Consumidor (SERNAC).
  • SUBTEL Circular 2026-01: Mandates multi-factor authentication (MFA) for critical infrastructure providers. Password sharing undermines MFA compliance, triggering audits and potential service termination.

Exceptions exist only if the service provider’s terms explicitly allow delegation (e.g., corporate admin accounts). Employers sharing credentials for system maintenance must document prior written consent under Código del Trabajo (Art. 5). Non-compliance risks civil litigation, regulatory sanctions, and reputational damage.