Guidelines on the Processing of Personal Data Through Artificial Intelligence (AI) in Colombia

The Superintendence of Industry and Commerce (SIC) of Colombia issued External Circular No. 2 of 2024, establishing guidelines regarding personal data processed through artificial intelligence (AI) systems.

This circular underscores the critical importance of secure environments that comply with current regulations prior to the initiation of any processing of personal data and even before the collection of information. Principles such as necessity, suitability, reasonableness and proportionality must be considered when using AI systems to process personal data.

It is crucial to note the importance of carrying out a privacy impact study, which is reiterated in the circular. Guidelines on the minimum information that such a study must contain are also provided.

The circular also establishes recommendations regarding the use of differential privacy techniques, through which an analysis of the information collected is allowed, without allowing the identification of personal data owners.

Holland & Knight has extensive experience advising companies on these matters. If you have any questions or concerns about these or other provisions, please contact the authors.

Information contained in this alert is for the general education and knowledge of our readers. It is not designed to be, and should not be used as, the sole source of information when analyzing and resolving a legal problem, and it should not be substituted for legal advice, which relies on a specific factual analysis. Moreover, the laws of each jurisdiction are different and are constantly changing. This information is not intended to create, and receipt of it does not constitute, an attorney-client relationship. If you have specific questions regarding a particular fact situation, we urge you to consult the authors of this publication, your Holland & Knight representative or other competent legal counsel.