Colombia Data Protection Law (Law 1581 of 2012)
Colombia's Law 1581 of 2012 establishes the general framework for the protection of personal data, regulated by Decree 1377 of 2013. It defines principles for lawful processing, requirements for consent, data subject rights, security obligations, and the role of data controllers and processors. Oversight is currently exercised by the Superintendence of Industry and Commerce (SIC), though legislative efforts are underway to establish an independent data protection authority.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Ley 1581: Data Protection Authority and Sanctions (Title VII)
| Code | Title |
|---|---|
| CO-L1581-A19 | Data Protection Authority (SIC) |
| CO-L1581-A21 | Functions of the SIC |
| CO-L1581-A23 | Sanctions |
Ley 1581: Duties of Controllers and Processors (Title VI)
| Code | Title |
|---|---|
| CO-L1581-A17 | Duties of Controllers (Responsables) |
| CO-L1581-A18 | Duties of Processors (Encargados) |
Ley 1581: General Provisions and Principles (Titles I-II)
| Code | Title |
|---|---|
| CO-L1581-A2 | Scope of Application |
| CO-L1581-A3 | Definitions |
| CO-L1581-A4-ACCESO | Principle of Restricted Access and Circulation |
| CO-L1581-A4-CONFID | Principle of Confidentiality |
| CO-L1581-A4-FINALIDAD | Principle of Purpose |
| CO-L1581-A4-LEGALIDAD | Principle of Legality |
| CO-L1581-A4-LIBERTAD | Principle of Freedom (Consent) |
| CO-L1581-A4-SEGURIDAD | Principle of Security |
| CO-L1581-A4-TRANSPARENCIA | Principle of Transparency |
| CO-L1581-A4-VERACIDAD | Principle of Veracity and Quality |
Ley 1581: Registry, International Transfers and BCRs
| Code | Title |
|---|---|
| CO-L1581-A25 | National Database Registry (RNBD) |
| CO-L1581-A26 | Prohibition on International Transfers |
| CO-L1581-A27 | Binding Corporate Rules |
Ley 1581: Rights and Conditions of Lawful Processing (Titles IV-V)
| Code | Title |
|---|---|
| CO-L1581-A10 | Cases Not Requiring Authorization |
| CO-L1581-A12 | Duty to Inform the Data Subject (Privacy Notice) |
| CO-L1581-A13 | Persons to Whom Information May Be Disclosed |
| CO-L1581-A14 | Consultations (Access Requests) |
| CO-L1581-A15 | Complaints (Reclamos) |
| CO-L1581-A8 | Data Subject Rights (Habeas Data) |
| CO-L1581-A9 | Authorization of the Data Subject |
Ley 1581: Special Categories of Data (Title III)
| Code | Title |
|---|---|
| CO-L1581-A5 | Sensitive Data Definition |
| CO-L1581-A6 | Processing of Sensitive Data |
| CO-L1581-A7 | Children's and Adolescents' Data |
Maps to 2 other frameworks
Frequently Asked Questions
What is Colombia Data Protection Law (Law 1581 of 2012)?
Colombia Data Protection Law (Law 1581 of 2012) is a compliance framework from Colombia with 6 domains and 28 controls. Colombia's Law 1581 of 2012 establishes the general framework for the protection of personal data, regulated by Decree 1377 of 2013. It defines principles for lawful processing, requirements for consent, data subject rights, security obligations, and the role of data controllers and processors. Oversight is currently exercised by the Superintendence of Industry and Commerce (SIC), though legislative efforts are underway to establish an independent data protection authority. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does Colombia Data Protection Law (Law 1581 of 2012) have?
Colombia Data Protection Law (Law 1581 of 2012) has 28 controls organised across 6 domains. The largest domains are Ley 1581: General Provisions and Principles (Titles I-II) (10 controls), Ley 1581: Rights and Conditions of Lawful Processing (Titles IV-V) (7 controls), Ley 1581: Data Protection Authority and Sanctions (Title VII) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does Colombia Data Protection Law (Law 1581 of 2012) map to?
Colombia Data Protection Law (Law 1581 of 2012) maps to 2 other compliance frameworks. The top mapping partners are GDPR (68% coverage), Costa Rica Personal Data Protection Law (Law No. 8968) as amended by Executive Decree No. 42089-MGP (25% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with Colombia Data Protection Law (Law 1581 of 2012) compliance?
Start your Colombia Data Protection Law (Law 1581 of 2012) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Colombia Data Protection Law (Law 1581 of 2012) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 28 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 718 frameworks.
Get Started Free →Free forever — no credit card required