On December 17, 2025, the National Cybersecurity Agency (ANCI) published in the Official Gazette the final list of the first group of entities designated as Operators of Vital Importance (OVI), corresponding to the first qualification procedure carried out under Law No. 21,663.

The list identifies 915 public and private institutions, as well as organizations, suppliers and essential service providers that play a critical role in Chile’s cybersecurity ecosystem.

The sectors designated as OVI include:

• Electricity sector companies.
• Telecommunications companies, including mobile operators and Internet service providers.
• Banking and financial institutions, as well as payment service providers.
• Digital services companies, digital infrastructure and IT services providers.
• Healthcare provider institutions.
• Public enterprises and bodies of the State administration.

Entities included on the list are not only required to comply with general cybersecurity and incident notification obligations, but must also implement additional measures, including compliance with ANCI guidelines, appointment of a cybersecurity delegate, implementation of ongoing training programs, adoption of an information security management system, and the development of cybersecurity-focused business continuity plans.

Designation as an OVI also entails being subject to an enhanced liability regime, with fines that may reach up to 40,000 UTM (approximately USD 3,000,000).

Entities designated as OVI may challenge their inclusion through:
(i) an administrative reconsideration appeal, to be filed no later than December 24, 2025, or
(ii) a claim of illegality before the Santiago Court of Appeals or the court corresponding to the claimant’s domicile, within 15 business days.