The Superintendence of Industry and Commerce (SIC) published the document “Inputs for Updating the Colombian Legal Framework on Personal Data Protection in Light of the Challenges Posed by Artificial Intelligence,” prepared within the framework of CONPES 4144 of 2025 – the National Artificial Intelligence Policy. The document analyzes the sufficiency of Colombia’s personal data protection regime in response to the growing use of AI systems and proposes recommendations for its update based on international best practices.
The study points out that AI systems involve the intensive processing of personal data throughout the entire lifecycle of the system, which generates risks to fundamental rights such as privacy and habeas data, including unauthorized data collection, inference of sensitive data, profiling, and automated decision-making. In this context, the SIC emphasizes the need to strengthen various elements to keep the legal regime on personal data protection up to date in relation to artificial intelligence, and therefore proposes different strategies in the short, medium, and long term.
