On August 6th, 2024, a new bill was filed aiming to reform Colombia’s General Data Protection Regulation. This bill introduces several key aspects, including, but not limited to the establishment of new legal bases that legitimize data processing, the lawfulness of consent for minors over 16 years old, the limitation of data processing as a right, the reduction of the timeframe for reporting security incidents, and the right of data subjects not to be subjected to fully automated decisions.
Therefore, the bill seeks to position Colombia alongside other Latin American countries that are in the process of aligning their regulations with international standards, such as the European Union’s General Data Protection Regulation.