On November 3, 2015, the Colombian Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio) enacted a regulation (source document in Spanish) ordering private companies listed with local chambers of commerce and state-owned companies to register their databases with the National Database Registry (Registro Nacional de Base de Datos or "RNDB"). The agency, which oversees data protection in Colombia, mandated that covered entities disclose to RNDB their database content, information security policies, sources of personal data, information regarding national and international transfer of personal data, complaints reported by users, and cases involving data breach.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
