Regulations › Rest of world › Colombia
Law 1581
Statutory Law 1581 of 2012 on General Provisions for the Protection of Personal Data
WhenIn effect since 18 October 2012
Who enforces itSuperintendencia de Industria y Comercio (SIC), Delegatura para la Protección de Datos Personales
Who it applies toProcessing of personal data in Colombia, and by foreign controllers where Colombian law applies.
Tell the regulatorReport security incidents to SIC through the RNBD within 15 business days of detection
DPO requiredEvery controller and processor must designate a person or area to assume the data protection f…
RegistrationCompanies and non-profits above an asset threshold (and public entities) must register databas…
Transfers abroadTransfers to countries without adequate protection are prohibited unless an exception applies…
Request deadlineQueries within 10 business days (plus 5)
Maximum fineUp to 2,000 monthly minimum wages (roughly USD 0.7m), plus suspension or closure of operations
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws