🇨🇴
Colombia
Statutory Law 1581 of 2012
Americas🔵 Substantial
Compliance Score
71%
10 Addressed
3 Partial
1 None
Authority
Superintendence of Industry and Commerce (SIC)
Overview
Colombia's Statutory Law 1581, effective 2012, provides a substantial framework for data protection. The SIC is the regulatory authority responsible for enforcement and guidance.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Colombia?+
Colombia is governed by the Statutory Law 1581 of 2012. The law is enforced by the Superintendence of Industry and Commerce (SIC). According to our analysis, the country has a Substantial level of data protection framework.
Does Colombia require a Data Protection Officer (DPO)?+
Yes, under the Statutory Law 1581 of 2012, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Colombia?+
Partially. While Statutory Law 1581 of 2012 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Colombia?+
Under the Statutory Law 1581 of 2012, organizations must notify the Superintendence of Industry and Commerce (SIC) and affected individuals without undue delay in the event of a personal data breach.