Colombia's SIC Requires Compliance with National Registry of Databases 2024 Obligations

Colombia's Superintendence of Industry and Commerce (SIC) reiterated the importance of complying with its obligations as set forth through Circular 003 of Aug. 1, 2018, regarding the update and registrations of databases in the National Registry of Databases (NRD).

Corporations and nonprofit entities with total assets over 100,000 Tax Value Units (Unidades de Valor Tributario or UVT) (approximately $4,706,500,000 Colombian pesos by 2024) and legal entities of a public nature are responsible for complying with this obligation. They must report the general information on their databases containing personal data and its handling, in accordance with the provisions of the Personal Data Protection Law (Law 1581 of 2012).

All required organizations must perform the annual update of information reported in the NRD before March 31, 2024.

In addition to the general update, the aforementioned organizations must also comply with the following obligations:

• Update of reports: No later than within the first 15 working days of February (i.e., by Feb. 21, 2024), the report of claims filed by holders of personal data in the previous six-month period must be made. If no claims are filed, organizations must notify the SIC that there are no new developments.
• Monthly update: If substantial changes are made to the information reported in the NRD, these updates must be made within the first 10 working days of each month.
• New databases: When the data controller generates a new database, said database must be registered within a maximum of two months after its creation.

Failure to comply with these obligations has resulted in increased controls and surveillance by the SIC, generating administrative orders and high fines to those who do not act in accordance.

Holland & Knight's Bogotá office has the experience to advise companies in these matters. Should you have any questions or concerns about these or other provisions of the entity, please contact the authors.

Information contained in this alert is for the general education and knowledge of our readers. It is not designed to be, and should not be used as, the sole source of information when analyzing and resolving a legal problem, and it should not be substituted for legal advice, which relies on a specific factual analysis. Moreover, the laws of each jurisdiction are different and are constantly changing. This information is not intended to create, and receipt of it does not constitute, an attorney-client relationship. If you have specific questions regarding a particular fact situation, we urge you to consult the authors of this publication, your Holland & Knight representative or other competent legal counsel.