On March 31st, 2025, Colombia’s Superintendence of Industry and Commerce (SIC) issued its first official position regarding the mandatory use of biometric authentication—such as fingerprints or facial recognition—on websites, platforms, and digital services, through Resolution No. 16582 of 2025. In its decision, the authority made it clear that no company may require the provision of such sensitive data as a condition for accessing a service, unless expressly authorized by law.
In this regard, the SIC emphasized that users must always be offered an alternative means of identity verification that does not involve the use of biometric data. This measure is intended to ensure that individuals are free to decide what personal information they share, without facing disproportionate burdens or unjustified restrictions when accessing digital services.
This decision reinforces the authorities’ commitment to upholding privacy rights and promoting the responsible use of personal data in digital environments.
