In February 2024, Cielo Rusinque was appointed Superintendent of Industry and Commerce, along with Grenfieth de Jesús Sierra Cadena, who became the new Deputy for the Protection of Personal Data. Since their appointments, the Superintendence of Industry and Commerce (SIC) has issued three External Circulars concerning personal data protection. These Circulars address the following topics: (i) the use of artificial intelligence in the processing of personal data, (ii) the scope of the Data Protection Authority (DPA)'s powers under Law 2300 of 2023, and (iii) guidelines for corporate administrators on processing personal data.

It is anticipated that in 2025, the DPA will continue to conduct dawn raids and request information, particularly focusing on the use of artificial intelligence and the responsibilities of administrators in the processing of personal data.

Additionally, the new Deputy for the Protection of Personal Data has focused especially on cybersecurity tools implemented by controllers and has issued various requests for information on the cybersecurity measures in place, especially in cases related to data breaches. This focus is expected to continue this year.