Colombia SIC Opens Identity Verification Consultation

Colombia’s Superintendency of Industry and Commerce (SIC) has opened a public consultation on identity verification mechanisms and personal data processing under Law 2573 of 2026. The notice, also shared through the agency’s official channels, seeks experience and technical input to strengthen identity theft prevention before the process closes on Sept. 25, 2026.

What is the SIC consultation looking for?

The SIC is collecting technical and legal input on identity verification technologies available on the market, including their effectiveness, accuracy, reliability and risks to data subjects’ rights. It also asked for proposals on regulatory models, technical standards, international best practices and the costs of implementation and operation for the entities involved.

That questionnaire was detailed in independent coverage by Baker McKenzie on the initiative. The same publication says the public consultation runs from Sept. 8 to Sept. 25, 2026, with the draft protocol scheduled for comment on Nov. 2, 2026, and the regulation expected on Nov. 20, 2026.

What deadlines did the process set?

Three milestones are already set for the process: the public consultation closes on Sept. 25, 2026, the draft protocol is published on Nov. 2, 2026, and the regulation is issued on Nov. 20, 2026. According to Baker McKenzie, those dates structure the discussion phase before the final text is adopted.

How does this connect with broader financial oversight?

The identity verification discussion comes alongside another regulatory signal from Colombia’s Financial Superintendency, which reported 18 projects approved by its Innovation Committee, with 17 successful exits and one pilot still in operation. That points to a supervisory environment that already includes testing of new technologies and business models.

In the same vein, the SFC said open finance standards and the handling of conduct toward financial consumers will be part of a supervisory ecosystem with experience in controlled experimentation. For financial institutions and related providers, the combination of both moves points to compliance changes in both identity and data, as well as supervised innovation.