SERVICES

Personal Data Protection (Habeas Data)

We design and implement comprehensive compliance programs in accordance with Law 1581 of 2012 and Decree 1377 of 2013 for the management of personal data. We help protect your company against investigations conducted by the SIC for violations of Colombia’s data protection (habeas data) regulations.

Our services include

Development of internal data security policies for the management and protection of personal data within the company.

Drafting of data processing policies and privacy notices.

Procedures for handling habeas data inquiries and complaints, integrated into the Customer Complaints, Claims, and Requests (PQR) Management System.

Implementation of authorization options and consent management mechanisms.

Registration with the SIC's National Database Registry (Registro Nacional de Bases de Datos – RNBD).

Legal representation and support in administrative investigations conducted by the SIC.

Training programs and continuous improvement initiatives in personal data protection.

Frequently Asked Questions

What is habeas data, and what obligations do companies have regarding it?

Habeas data is the constitutional right of individuals to access, update, and correct their personal information stored in databases. Law 1581 of 2012 requires companies to implement data processing policies, obtain the data subjects’ authorization, and register their databases with the SIC’s National Database Registry.

What happens if my company fails to comply with the Habeas Data Law?

Investigations by the SIC, fines of up to 2,000 monthly legal minimum wages (SMLMV), suspension of data processing activities for up to six months, temporary or permanent closure of operations involving personal data, and reputational damage.

BURITICÁ ABOGADOS

Our experience allow us providing strong and efficient advice