Colombia Adopts Regulations To Implement Its Data Protection Laws

With the advent of new rules regulating the protection of personal data, companies with operations in Colombia must implement policies and practices to comply with Colombia's privacy law. In October 2012, Colombia enacted Law 1581¹ to regulate the protection of personal data and safeguard the constitutional right of privacy in the midst of the challenges posed by globalization and new technologies that enable the easy electronic transfer of personal data. On June 27, 2013, Colombia's executive branch issued Decree 1377,² to implement various provisions of Law 1581. Decree 1377 went into effect immediately. This article discusses obligations arising under Law 1581 and Decree 1377, the steep potential sanctions for noncompliance, as well as recommendations for companies to ensure full compliance with the privacy law.