Law: Statutory Law 1581 of 2012 (October 17) Which Issues General Provisions for the Protection of Personal Data (only available in Spanish here) ('the Data Protection Law') and Decree 1377 of 2013 (June 27) Which Partially Regulates Law 1581 of 2012 (only available in Spanish here) ('the Decree')

Regulator: Colombian data protection authority ('SIC')

Summary: The Data Protection Law provides the core legal framework for data protection within Colombia in combination with additional supplementary decrees and circulars which provide for the interpretation of the Data Protection Law. Articles 15 and 20 of the Colombian Political Constitution (only available in Spanish here) ('the Constitution') explicitly recognise the right to privacy and the right to data rectification. The SIC currently holds the presidency of the International Consumer Protection and Enforcement Network ('ICPEN') and will remain in this position until July 2020.