The Colombia data protection authority (SIC) published its decision in resolution number 16851 of 2024, as issued on April 9, 2024, in which it imposed a fine of COP 69.8 million (approx. $16,412) on FUNDACION PARA EL DESARROLLO INTEGRAL DEL SISTEMA GENERAL DE SEGURIDAD SOCIAL EN COLOMBIA for violations of Statutory Law 1581 of 2012 (October 17), which Issues General Provisions for the Protection of Personal Data (the Data Protection Law) following a complaint.

Background to the decision

On April 27, 2021, FUNDACION PARA EL DESARROLLO INTEGRAL DEL SISTEMA GENERAL DE SEGURIDAD SOCIAL EN COLOMBIA, a nonprofit entity, received an administrative order requesting the registration of their databases and the processing of personal data in the National Database Registry. The SIC stated that FUNDACION PARA EL DESARROLLO INTEGRAL DEL SISTEMA GENERAL DE SEGURIDAD SOCIAL EN COLOMBIA failed to prove compliance with the order as issued thus resulting in the administrative investigation.

Findings of the SIC

The SIC stated that violations of Articles 17(o) and 21(f) of the Data Protection Law occurred when FUNDACION PARA EL DESARROLLO INTEGRAL DEL SISTEMA GENERAL DE SEGURIDAD SOCIAL EN COLOMBIA failed to respond to the administrative order and thus endangered the legal interests protected by the Data Protection Law.

Outcomes

As a result, a sanction of COP 69.8 million (approx. $16,484) was imposed on FUNDACION PARA EL DESARROLLO INTEGRAL DEL SISTEMA GENERAL DE SEGURIDAD SOCIAL EN COLOMBIA to be paid within five business days following the execution of the resolution.

You can read the resolution, only available in Spanish, here.