Colombia moves on data privacy law

The Superintendence of Industry and Commerce, known as the SIC, has published the document "ABC of the Personal Data Protection Bill in Colombia," explaining that the initiative seeks to modernize Law 1581 of 2012 and update the personal data protection framework.

Scope of the bill

According to the SIC, the bill would apply to Colombian and foreign companies that process personal data in Colombia. That wording broadens the law’s reach compared with Law 1581 of 2012.

The agency’s publication adds to the legislative debate over personal data processing in the country and makes clear that the reform is not limited to local actors. It also covers foreign companies that handle personal information within Colombian territory.

What the material confirms

Based on the verified facts available, the confirmed information centers on two points, the SIC’s publication of the ABC and its intent to modernize the current legal framework. The material does not provide additional details on specific articles, the legislative timeline, or concrete changes to the obligations of data controllers and processors.

The official reference used by the SIC is Law 1581 of 2012, which would be updated if the proposed bill moves forward. The superintendence did not detail an implementation schedule or an effective date in the material it released.