Colombia. Comprehensive data protection. Decree

Decree 1074/2015Single Regulatory Decree of the Commerce, Industry and Tourism Sector, Decree 1074 of 2015 (incorporating Decree 1377 of 2013)

In force

Partly verified

Medium confidence. Dates from general knowledge.

§1Summary

Synopsis

Implements Law 1581 with detailed rules on authorisation, privacy notices, information-handling policies, transfers and transmissions to processors, and database registration.

Key themes

authorisation mechanics
privacy notice
transmission contracts
RNBD
accountability

Unique features

Distinguishes 'transfer' (to another controller) from 'transmission' (to a processor), with a transmission contract allowing processor hosting abroad without separate consent.

SaaS relevance

SaaS providers acting as processors for Colombian customers need a compliant transmission contract.

§2Obligations

Extraterritorial: Limited
Cross-border transfers: Transmission contracts for processors

§3Dates

Key dates

Adopted 26 May 2015
In force 26 May 2015
Decree 1377 of 2013-06-27 compiled into Part 2, Title 2, Chapter 25-26

§4Text and authority

Text

Authoritative text funcionpublica.gov.co

Authority

Superintendencia de Industria y Comercio (SIC) - Delegatura para la Protección de Datos Personales

§5Where it applies

Domestic law of: Colombia

§6Sources and verification

Sources consulted

Verification

Medium confidence.

Partly verified

Medium confidence. Dates from general knowledge.