Add a bookmark to get started

Carla Illanes Web Large

Carla Illanes

she/herCounsel
Carla Illanes is an innate talent — excellent communication with clients, backed by knowledge, experience, and contact networks. She plays an active role in the discussions on Chile's data protection ecosystem.
Legal 500 Latin America Guide, (2025)
About

Carla Illanes specializes in data protection and information security, particularly focusing on the legal aspects of data collection and processing. Her practice includes designing and implementing privacy and security policies, conducting audits and risk assessments, developing effective strategies for data transfer, and creating compliance programs, among other areas.

She previously worked at the Ministry of the Interior and Public Security, where she provided legal advice on developing projects to prevent technological crimes. Later, in the Digital Government Division of the Ministry of the General Secretariat of the Presidency, she led the legal team responsible for implementing the law on the digital transformation of the State, impacting more than 1,000 administrative bodies. She actively participated in drafting associated regulations on cybersecurity, information security, interoperability and authentication. Additionally, she played a key role in drafting the law that modified the deadlines and stages of implementation for these initiatives.

She has extensive experience in information technologies, including digital identity, open data, interoperability, electronic records, technology procurement, digital transformation, artificial intelligence and cybersecurity. Her expertise also encompasses intellectual property, blockchain technology and smart contracts.

Bar AdmissionsChile, 2009

EXPERIENCE

  • One of the world's leading providers of mining and infrastructure solutions regarding the possible contingencies for the authorization of the use of images taken and sent by users residing in remote locations, following Chilean regulations on intellectual property and data protection
  •  A fintech company dedicated to providing mortgage financing to all those who do not meet the requirements requested of traditional financial institutions is updating its privacy policy, considering possible regulatory changes related to data protection
  • A leading global platform for home delivery of products, mainly in the food sector, regarding the practice of web scraping for the company, and the legal implications it brings concerning Personal Data Protection, for which we consider the GDPR, Law No. 19.628 and the Personal Data Protection Bill
  • A major multinational mining company that produces gold on regulatory compliance in its corporate social investment program in Chile, including restructuring collaboration agreements, enhancing due diligence processes, and assessing tax benefits for future donations
  • A multinational tire manufacturer in the review of a marketing campaign showing children from data protection, intellectual property, and consumer protection perspectives
  • A company dedicated to buying and selling cars online on the assessment of regulatory risks due to regulatory changes on the processing of personal data in the purchase process of a tech company, ensuring operational continuity and reducing regulatory risks associated with the target's business model
  • A fintech startup in drafting and developing all the company's data protection and cybersecurity policies to comply with the requirements established in the new Fintech regulation for the start of its application for authorization before the CMF
  • A company that offers to scan the iris in exchange for cryptocurrencies in the review and analysis of the Chilean regulation on national identification documents, with particular reference to how the legislation protects the identification data in such documents
  • A company in the technology and hospitality sector regarding the legal aspects of the authorization to use images provided through videos recorded and sent by people residing in remote locations, following Chilean regulations on intellectual property and data protection
  • An advertising agency with operations in the United States, in the review and drafting of the terms and conditions of a sweepstakes to be held in different states of the United States and the preparation of the contract to be signed with the eventual winners of the contest
Languages
  • Spanish
  • English
Education
  • Law Degree, Faculty of Law, Catholic University of the Most Holy Conception, 2006

    Diploma in Current Problems of Criminal Defense, Faculty of Law, University of the Andes, 2008

    Master's Degree, Regulated Sectors Law, Specialization in Banking, Subspecializations in Transportation and Energy, Postgraduate School of Law, Carlos III University of Madrid, 2018

    Diploma in Personal Data Protection, University of Chile, 2020

    Course in Data Protection, Garrigues Study Center, 2024

AWARDS

Legal 500 Latin America

  • Leading Associate, Chile: Data Privacy, (2025)
  • Recommended, Chile: Data Privacy, (2024)

Prior Experience

Before joining DLA Piper, Carla worked as an advisor in the Digital Government area of the Ministry General Secretariat of the Presidency.

Teaching Experience

  • Professor, Course in Digital Transformation of the States from an Applied Perspective, LL.M. Program, Pontifical Catholic University of Chile, (2023-present)
  • Professor, Course in Digital Transformation of the State, Pontifical Catholic University of Chile, (2023-present)
  • Professor, Course in Digital Transformation of the State, Adolfo Ibáñez University, (2023-present)
  • Visiting Professor, Master's Degree in Administrative Law, Pontifical Catholic University of Valparaíso (PUCV), (2022-present)
  • Professor, Diploma in Personal Data Protection, Pontifical Catholic University of Chile, (2022-present)
  • Professor, Course in Municipal Law, University of Los Andes, (2022-present)
  • Professor, Diploma in Technology and Regulation, Faculty of Law, University of Development, (2021-present)

Memberships

  • International Association of Privacy Professionals

Connect