On June 27, 2013, the Colombian Ministry of Commerce, Industry and Tourism issued regulations pursuant to the country’s new data protection law. The regulations, entitled Decreto Número 1377 de 2013, por el cual se reglamenta parcialmente la Ley 1581 de 2012, address a variety of topics, including the following:
- Consent requirements relating to the collection of personal data;
- Restrictions on the processing of children’s personal data;
- Content and delivery of privacy notices;
- Cross-border data transfer restrictions;
- Data transfer agreements;
- Internal privacy policies and mechanisms for implementing them;
- Rules for the processing of sensitive personal data, including biometric data;
- Data subjects’ rights; and
- Applicability of the new rules to previously collected personal data.