Colombia Advances Three Data Bills

Colombia’s Congress received three separate initiatives in September tied to critical infrastructure, digital content and audiovisual evidence. The House of Representatives introduced Bill 343 of 2026, Senator María del Rosario García advanced a Digital Protection Law, and Senator Alfredo Deluque announced a proposal, still without a confirmed bill number, to strengthen security through security camera files.

What did the House propose with Bill 343 of 2026?

The House introduced Bill 343 of 2026 on September 9, 2026, as an ordinary law to establish a framework for protecting critical infrastructure and ensuring continuity of essential services. The proposal is now moving through the legislative process in the 2026-2027 session, and it is not yet a law.

The House’s official summary added that the bill is meant to protect essential services from actions by organized armed groups, organized crime and illegal economies. It also confirmed that the file has several coauthors, although the available material does not detail the full text or the operational scope of each measure.

What does the so-called Digital Protection Law seek to do?

Senator María del Rosario García introduced a proposal to create, for the first time, the offense of sharing intimate material without consent with the intent to cause harm. The measure would impose prison terms of 16 to 54 months, a fast-track special procedure, free legal assistance and mental health care for the victim.

The text also allows a judge to order that the material be hidden from social media platforms and search engines as soon as the complaint is filed, while preserving it as evidence. According to the Senate presentation, the initiative aims to give authorities tools to protect women in schools, in courtrooms and online.

What is known about Alfredo Deluque’s proposal?

Alfredo Deluque announced a legislative proposal that would allow video, audio and image files from security cameras to be sent directly to the Office of the Attorney General when requested by victims or complainants in criminal cases. The source reporting the announcement said the measure will begin moving through the congressional constitutional committees.

For now, no bill number or specific stage of progress has been reported, so that point remains without full official confirmation. The available coverage only makes it possible to say that debate will begin in committee and that the regulatory scope is still to be discussed.

How does this fit with the rest of the digital agenda?

The legislative sequence comes after other recent moves in Colombia on personal data and synthetic content. An analysis by Compliance Latam said Law 2502 of 2025 added a criminal aggravating factor for deepfakes, understood as digital content altered or generated to pass as a real person without prior authorization, and used as input for other crimes.

That same analysis said that, beyond that aggravating factor, broad cybersecurity reforms comparable to frameworks such as NIS2 have not yet been identified. At the same time, El Espectador said sexual deepfakes do not have a specific offense under the current legal wording, although they could be investigated under existing charges such as sexual abuse, child sexual exploitation, computer crimes or extortion, depending on the case.

The same outlet added that the recent regulatory response on children and digital environments relies more on prevention, digital literacy, privacy, reporting channels and interagency coordination than on an independent offense for sexual deepfakes. That leaves Colombia with several legal pieces in motion, but still without a single framework covering critical infrastructure, personal data and synthetic content at the same time.