PrivacyTerrain

Editorial caveat

Structured values summarize official materials for research and planning. They are reviewed by humans before publication and should not be treated as legal advice.

medium confidence, Should get a tighter pass on registry and enforcement details.

At a glance

Key presentation points

A compact summary of high-signal fields before the full structured record.

Effective statusin-force1 primary + 1 secondary • Reviewed 17/04/2026

Territorial scopeApplies to personal data processing in Colombia, with database registration and transfer rules shaped by the SIC.1 primary + 1 secondary • Reviewed 17/04/2026

Regulator or enforcement authority summarySuperintendence of Industry and Commerce1 primary • Reviewed 17/04/2026

Requires legal basisYes1 primary + 1 secondary • Reviewed 17/04/2026

Structured record

Regulation details grouped by topic

Each value keeps its field context, linked sources, notes, and review date together to avoid detached or ambiguous statements.

Identity

Effective status: in-forceSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Law status: activeSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Effective date: 2012-10-18Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Last amended: 2013-06-27Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Scope

Extraterritorial application: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Territorial scope: Applies to personal data processing in Colombia, with database registration and transfer rules shaped by the SIC.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Private sector coverage: Applies to private controllers and processors handling personal data in Colombia.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Public sector coverage: Public bodies are also covered unless a specific exemption applies.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Definitions

Personal data definition: Personal data means any information linked or that can be associated to one or more identified or identifiable natural persons.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Sensitive data recognized: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Legal Basis

Legal bases: consent, statutory exception, public order necessitySupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Requires legal basis: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Rights

Right of access: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to deletion: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to object: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to portability: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to appeal: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Right to erasure or delete summary: Deletion / suppression rightsSupport: 1 primary • Reviewed 17/04/2026Sources: Law 1581 text (primary)Note: Colombia's framework is better summarized through habeas data style rights language than purely GDPR terminology.
Right to rectification or correction summary: Rectification rightSupport: 1 primary • Reviewed 17/04/2026Sources: Law 1581 text (primary)Note: Colombia includes correction-related rights within its general personal data protection law.

Breach

Breach deadline (hours): 0Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Breach notification required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Governance

DPO required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Impact assessment required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Records of processing required: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Enforcement

Maximum fine: Administrative fines can be substantial, and the regulator may order suspension of processing activities.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Private right of action: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Regulator or enforcement authority summary: Superintendence of Industry and CommerceSupport: 1 primary • Reviewed 17/04/2026Sources: Law 1581 text (primary)Note: Colombia's privacy oversight centers on the SIC.

Transfers

Cross-border transfer restricted: YesSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.
Data localization required: NoSupport: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Marketing

Cookie consent rule: Consent and privacy notice expectations affect online tracking and cookie disclosures.Support: 1 primary + 1 secondary • Reviewed 17/04/2026Sources: Law 1581 text (primary); SIC guidance (secondary)Note: Seeded as part of the Americas expansion wave. Requires follow-up editorial review.

Official sources

Law 1581 textPrimary official law • en • html
SIC guidanceSecondary official material • en • html

Colombia