Blog
Compliance Timeframes for Open Finance in Colombia
With the issuance of Circular 004-2024, Colombia´s financial authority, the “Superintendencia Financiera”, established three different timeframes for compliance with several provisions of the authority´s main regulatory piece, “La Circular Básica Jurídica”.
HOW TO STRATEGICALLY OBTAIN CONSENT AND PROCESS DATA OF UNDERAGE DATASUBJECTS IN COLOMBIA
With the increasingly great participation of underage datasubjects on the Internet, where they are directly becoming consumers, it has become quite a challenge to create legally and commercially viable strategies to request for consent and process minors’ data with a...
Information security and privacy of minors in the TikTok mobile application
On May 12, 2020, the Superintendence of Industry and Commerce initiated an administrate action with the purpose of establishing whether TikTok Pte Ltd. (Singapore), complies or not with the Colombian regulation on the processing of personal data of children and...
Circulation of sensitive information between authorities and private entities in times of COVID-19
Due to the medical and sanitary urgency in the country, the Superintendency of Industry and Commerce (SIC), through the external memorandum 001 of March 23rd of 2020, authorized the cellular operators and the Industry Association of Colombia (ASOMOVIL) to provide the...
The new circular issued between the Superintendece of Industry and Commerce and the National Agency of Legal Defense of the State regarding the treatment of personal data in interoperable information systems.
This external circular published the 5th of September of 2019 presents various general guidelines that public entities and private entities that have public functions must follow to protect the right of habeas data and to protect personal information in interoperable...
The Superintendence of Industry and Commerce formulates statement of objection against Rappi for a posible violation of the laws of consumer protection in Colombia
Consumer complaints: The SIC (for its acronym in spanish) mentioned that consumers presented a lot of complaints about different behaviors of Rappi. Most of them were about: Payments different to those announced in the app. The infringement of discounts and special...
How to make the principle of accountability a reality in our organizations? Steps in order to achieve it. (Part II)
In this submission, we will continue to develop the basic steps that should be followed in order to consolidate a basic system of data protection management that conserves its vitality and dynamism through time: Develop simple tools that go in accordance with your...
How to make the principle of accountability a reality in our organizations? Steps in order to achieve it. (Part I)
Any person whose activity is related or implies the use of personal data should have nowadays: A basic management system of data protection that includes: The adoption of data protection policies; The creation of the necessary consents correctly adapted to the type of...
Do you know what the Accountability principle, better known in Colombia as Demonstrated Responsibility, is?
This principle intends… That the regulations that protect personal information are effectively and consciously enforced by those that administer, recollect, use and in general dispose of the information that belongs to natural persons, in such a way that there´s an...
RAPPI SANCTION
On November 3 of 2016, a user filed a complaint against the mobile platform RAPPI for his information to be deleted from their databases, as he didn’t want to receive any more text messages or emails from the company. However, he continued to receive publicity from...