Data localization and regulation of non-personal data
Jump to
Data localization and regulation of non-personal data Start Comparison
Are there data localization/data residency or other types of laws that may require the retention and storage of data in the local jurisdiction, or prohibit the transfer of data out of the jurisdiction?

Last review date: 10 December 2024

No.

Does law or regulation impose mandatory requirements to share or make accessible non-personal data?

Last review date: 10 December 2024

  Obligation for public sector organizations to share or make accessible non-personal data

  Obligation for private organizations to share or make accessible other non-personal data

If so, please provide brief details of the relevant law or regulation.

The right to request information is a fundamental right in Colombia, allowing citizens to submit petitions to authorities or entities for information, recognition of rights, and resolution of legal situations, among others. Failure to respond to a petition or not doing so within the established period (15 business days) may be considered a disciplinary offense for the public servants or individuals involved.

Rights to petition may also be directed to private entities.

In response to the petition, the denial to provide information should only be based on the confidentiality of the information in accordance with the Political Constitution or any Colombian Law that establishes confidentiality over specific information, such as Decision 4886 of 2000 of the Andean Community of Nations, and in particular:

  • Those related to national defense or security
  • Instructions on diplomatic matters or confidential negotiations
  • Those involving individuals' rights to privacy and intimacy, including resumes, work history, pension files, and other personnel records maintained by public or private institutions, as well as medical histories
  • Concerns related to the nation's financial credit conditions and treasury operations, along with technical studies for assessing the nation's assets
  • Information regarding financial and commercial data, which is governed by Law 1266 of 2008
  • Information protected by commercial or trade secrecy, along with the strategic plans of public service companies
  • Those protected by professional secrecy
  • Human genetic data
What specific obligations do these data-sharing rules impose on private organizations?

Last review date: 10 December 2024

         Obligation to share data on request