Skip to content

Regulation Tracker / Other

Circular Externa 002 de 2024: Guidelines on the processing of personal data in AI systems

Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio)

last revised 2024-08-21last verified 2026-09-041 versioncountry page →

RegulationIn forceRisk classificationRecord-keeping

map categories:Data protection and legal AI

Unverified: we have not yet opened the official document at the linked address. The record is listed for completeness and excluded from search indexes until confirmed.

Binding instruction from Colombia's data-protection authority to all controllers it supervises: personal-data processing in AI systems must satisfy suitability, necessity, reasonableness and strict proportionality under Laws 1266/2008 and 1581/2012, with prior risk identification and mitigation, privacy by design and by default, staff training and continuous monitoring of security measures.

Applies to
all
Effective
21 Aug 2024
Current version
Original · 21 Aug 2024
Last verified
04 Sept 2026
Official text
sedeelectronica.sic.gov.co/sites/default/files/normativa/Circular%20Ex…

What the document requires

  • Four criteria: suitability, necessity, reasonableness and strict proportionality.
  • Risk identification and mitigation before deploying AI systems.
  • Privacy by design and by default, with transparency to data subjects.
  • Continuous staff training and monitoring of security measures.

Version history

VersionDateWhat changedSource
Originalcurrent2024-08-21First version recorded.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "Circular Externa 002 de 2024: Guidelines on the processing of personal data in AI systems" (Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio), Original, 2024-08-21), safelegalai.com/regulation/other/co-sic-circular-externa-002-2024 (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in Other