Colombia: Minimum standards for protection of personal data

Colombia issued Decree 255 relating to minimum standards for the protection of personal data

Decree 255 relates to minimum standards for the protection of personal data

The Ministry of Commerce, Industry and Tourism on 23 February 2022 issued Decree 255 relating to minimum standards for the protection of personal data in Colombia. 

The decree indicates that the policies adopted by a business group with respect to protection of personal data must contain minimum standards not only for the transfer of personal data to third countries, but also to obtain the certification of good practices in the protection of personal data by the Superintendence of Industry and Commerce.

Read a February 2022 report (Spanish) prepared by the KPMG member firm in Colombia

 

The KPMG name and logo are trademarks used under license by the independent member firms of the KPMG global organization. KPMG International Limited is a private English company limited by guarantee and does not provide services to clients. No member firm has any authority to obligate or bind KPMG International or any other member firm vis-à-vis third parties, nor does KPMG International have any such authority to obligate or bind any member firm. The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation. For more information, contact KPMG's Federal Tax Legislative and Regulatory Services Group at: + 1 202 533 4366, 1801 K Street NW, Washington, DC 20006.