← Data protection and cybercrime laws by country, compared
Colombia: data protection law, cybercrimes, fines and penalties
Law 1581/2012 enforced by the SIC, an active authority fining unauthorized marketing and acting on biometrics cases.
- Law
- Ley 1581 de 2012 (Data Protection Law)
- Authority
- SIC (Superintendencia de Industria y Comercio)
- Max fine
- Up to 2,000 monthly minimum wages (art. 23)
- Breach notification
- —
- DPO
- —
Crimes
| Abusive access to a computer system | Art. 269A Penal Code (Ley 1273/2009) | 48 to 96 months |
| Violation of personal data | Art. 269F Penal Code | 48 to 96 months |
| Website spoofing to capture data (phishing) | Art. 269G Penal Code | 48 to 96 months |
| Computer theft / non-consensual asset transfer | Arts. 269I and 269J Penal Code | Up to 120 months |
Risks
- Unauthorized telemarketing (Law 2300/2023; Movistar fined COP 670M)
- Biometrics (Worldcoin operations shut down)
- Use of data without authorization and ignored deletion requests
- Law 2300/2023 "Dejen de Fregar": restricts commercial calls, SMS and WhatsApp
Source: Vanguardia – Movistar · Asuntos Legales – SIC · Portafolio – Worldcoin · Función Pública – Ley 1581 · Función Pública – Ley 1273