Why this became urgent
For years, pre-employment assessments in Chile lived in a comfortable gray zone: everyone used them, few documented consent, and almost nobody thought about report-retention periods. That world is over. The entry into force of Chile’s new personal-data regime (Law 21.719), with a supervisory agency and real fines, turns assessment practices into a compliance matter — not just good manners.
The good news: complying well is not hard, and companies that do turn compliance into an employer-brand advantage.
The legal framework in three layers
1. Labor Code: relevance and non-discrimination
Article 2 of the Chilean Labor Code prohibits discrimination not based on suitability or qualifications for the role. Translated to assessments: you may evaluate what relates to job performance; you may not use instruments to filter by protected categories or characteristics irrelevant to the role. The control question is simple: can you explain why each assessed dimension matters for this job? If the answer is vague, either the instrument or the process design is wrong.
2. Personal data: the new standard
Assessment results are the candidate’s personal data. Operationally, the new framework demands: a lawful basis and declared purpose (specific informed consent, not a generic clause buried in the application); minimization (assess what the role needs, not exhaustive profiles "just in case"); honoring access and deletion requests; limited retention with verifiable deletion for non-selected candidates; and security — reports circulating by email across the company are an incident waiting to happen; access must be role-based and traceable.
3. Professional good practice
Beyond the legal minimum: instruments with methodological backing, trained readers, results returned to candidates who request them, and a final decision that is always human and integrated — never automated by score.
Where DISC fits in this framework
- It is not a clinical test. It does not diagnose mental health, measure intelligence or detect pathology. It describes observable work style: how a person decides, interacts, paces and responds to rules. That keeps it away from health-data territory and anchored in direct job relevance.
- It is transparent and explainable. Candidates answer about their own behavior and the report can be shared and discussed. No black box — increasingly relevant as regulation of automated decisions advances.
- Its relevance is easy to substantiate when a behavioral job profile exists: the link between what is measured and expected performance is documented by design. How to build that profile is covered in our DISC hiring guide.
At QuadraProfile, data handling follows the same framework: informed consent at application, personal data encrypted at rest, role-based access on the platform and traceability for every generated report.
A compliance checklist for your process
- A documented job profile justifying what is assessed and why.
- Specific informed consent: which instrument, what it measures, who sees results, how long they are kept.
- Standardized application — same conditions for every candidate in the process.
- Role-restricted, logged access to reports.
- A written retention policy with verifiable deletion for non-selected candidates.
- A procedure to answer access or deletion requests.
- A final decision that is integrated and human, documented beyond the test score.
Keep exploring
Evaluating a behavioral tool? Start with what the DISC test is and compare real costs in our Chile pricing guide. Specific questions about implementing a compliant process? Let’s talk.
