latam
Colombia
Colombia's data protection framework combines a general personal data law with detailed regulator guidance and registration obligations.
Editorial caveat
Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.
medium confidence, Should get a tighter pass on registry and enforcement details.
Breach
- Breach deadline (hours)
- 0
- Breach notification required
- Yes
Marketing
- Cookie consent rule
- Consent and privacy notice expectations affect online tracking and cookie disclosures.
Transfers
- Cross-border transfer restricted
- Yes
- Data localization required
- No
Governance
- DPO required
- No
- Impact assessment required
- No
- Records of processing required
- Yes
Identity
- Effective date
- 2012-10-18
- Effective status
- in-force
- Last amended
- 2013-06-27
- Law status
- active
Scope
- Extraterritorial application
- No
- Private sector coverage
- Applies to private controllers and processors handling personal data in Colombia.
- Public sector coverage
- Public bodies are also covered unless a specific exemption applies.
- Territorial scope
- Applies to personal data processing in Colombia, with database registration and transfer rules shaped by the SIC.
Legal Basis
- Legal bases
- consent, statutory exception, public order necessity
- Requires legal basis
- Yes
Enforcement
- Maximum fine
- Administrative fines can be substantial, and the regulator may order suspension of processing activities.
- Private right of action
- Yes
- Regulator or enforcement authority summary
- Superintendence of Industry and Commerce
Definitions
- Personal data definition
- Personal data means any information linked or that can be associated to one or more identified or identifiable natural persons.
- Sensitive data recognized
- Yes
Rights
- Right of access
- Yes
- Right to appeal
- Yes
- Right to deletion
- Yes
- Right to erasure or delete summary
- Deletion / suppression rights
- Right to object
- No
- Right to portability
- No
- Right to rectification or correction summary
- Rectification right
Official sources
- Law 1581 textPrimary official law • en • html
- SIC guidanceSecondary official material • en • html