Colombia Initiates National Database Registration Process

On November 3, 2015, the Colombian Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio) enacted a regulation (source document in Spanish) ordering private companies listed with local chambers of commerce and state-owned companies to register their databases with the National Database Registry (Registro Nacional de Base de Datos or "RNDB"). The agency, which oversees data protection in Colombia, mandated that covered entities disclose to RNDB their database content, information security policies, sources of personal data, information regarding national and international transfer of personal data, complaints reported by users, and cases involving data breach.