Colombia has enacted Statutory Law 1581 of 2012, establishing general rules for the protection of personal data and giving effect to the constitutional right of habeas data.
Key points
- Regulated by the Superintendence of Industry and Commerce (SIC).
- Security measures and incident reporting are required.
- Databases must be registered in the National Database Registry.
- Transfers need adequate-country status, consent or SIC declaration.
UK organisations with Colombian customers, employees or operations should review their compliance, particularly registration of databases and the conditions for international transfers.
Source: Ley Estatutaria 1581 de 2012 (Función Pública, Colombia)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
