Personal data regulation in Colombia: strengthening the enforcement regime and regulatory outlook
Colombia strengthens its data protection framework: tougher penalties, new requirements for AI, fintech and cybersecurity, measures to combat identity theft, and a more proactive authority. Businesses face greater data transparency, oversight and governance obligations in 2026.
Personal data regulations in Colombia have experienced significant change over the last few years. This development is the result of both the strengthening of the penalty framework by the Industry and Trade Authority (SIC), Colombia’s national data protection authority, and also, the processing of draft legislation intended to modernize the existing regime and bring it into line with international standards, including the European Union’s General Data Protection Regulation (GDPR).
This publication examines:
- Current regulatory framework
- Enactment of new legislation and developments in 2025
- Draft Legislation
- Case law developments in connection with personal data protection
- Key precedents and actions by the SIC in 2025
- Enactment of new legislation and developments in 2026
- Agenda for 2026
Access here the full content.
Contacts
