Abstract

Purpose/Context. Law 21.719 marks a significant shift in Chile's regulatory framework for personal data protection, with particular implications for health data. This article offers a critical examination of the law in relation to Chile's regulatory evolution since 1999 and the World Health Organization's six ethical principles for the use of data and artificial intelligence in health. Methods/Approach. The study combines a systematic documentary analysis of legislation, international guidelines, and specialized literature with an argumentative bioethical essay. The analysis is organized around the WHO's ethical principles, complemented by classical bioethics and critical philosophical perspectives on contemporary digitalization. Results/Findings. The assessment identifies notable progress in data-subject rights, transparency, security safeguards, and the establishment of an independent data-protection authority. However, significant gaps persist regarding dynamic consent, risks of re-identification, governance of secondary databases, protection of vulnerable groups, and mechanisms for community participation. The analysis also highlights tensions arising from digital exposure, horizontal surveillance, and the risk of territorial stigmatization. Discussion/Conclusions/Contributions. Law 21.719 represents normative progress and aligns with international standards, but its legitimacy will depend on the effective implementation of its principles. The article argues for shifting from a "useful data" paradigm toward "just data," oriented to the common good without undermining autonomy, dignity, or the rights of vulnerable populations. Its main contribution is the development of a bioethical framework for evaluating health-data regulation in contexts of digital transformation.