Law 1481 of 2012 “laying down general provisions for the protection of personal data” created the National Registry of Databases. Likewise it was established that its administration will be in charge of the Superintendence of Industry and Commerce and that the Government will regulate the minimum information that must contain and the terms and conditions under which the results of the treatment must be registered.

For this reason we inform all businessmen that they must register their databases in the National Registry of Databases.

It must be considered that together with the registration of the databases, the policy of the privacy information should be attached, which should exist since 2012, in accordance with the provisions of art. 18 literal f of Law 1581 of 2012

It is important to note that article 23 of Law 1581 of 2012 indicates that the Superintendence of Industry and Commerce may impose the following sanctions to the Managers of Treatment and those in Charge of Treatment:

  • Fines of a personal and institutional nature up to the equivalent of two thousand (2,000) minimum monthly legal wages in force at the time of the imposition of the sanction. The fines may be successive as long as the breach that originated them subsists.
  • Suspension of the activities related to the Treatment for up to a term of six (6) months.
  • Temporary closure of operations related to the Treatment after the suspension period has elapsed without corrective measures being taken.
  • Immediate and definitive closure of the operation involving the processing of sensitive data. The Superintendence of Industry and Commerce announced that it will extend the deadline for the registration of the databases until June 30, 2017.