Processes biometric data, in Colombia

Ley 1581 de 2012, arts. 5-7 (Datos Sensibles y Menores) · Read the law's page

• Before processing sensitive personal data, including data revealing racial or ethnic origin, political opinion, religious or philosophical belief, union or human rights organization membership, health, sexual life, or biometric data, obtain the data subject's explicit authorization; processing sensitive personal data is otherwise prohibited.
• Process sensitive personal data without the data subject's explicit authorization only where it protects the data subject's vital interest and they cannot consent, where a not for profit political, philosophical, religious or union body processes it about its own members without disclosing it to third parties, where it is needed to establish, exercise or defend a right in a judicial proceeding, or where it serves a historical, statistical or scientific purpose and the data subject's identity is suppressed.
• Do not process a child's or adolescent's personal data unless it is data of a public nature, and provide children, adolescents and their guardians with information and training on the risks of improper processing and on the safe, responsible use of their personal data.

Ley 599 de 2000, art. 296 (as amended by Ley 2502 de 2025) · Read the law's page

• Do not use artificial intelligence to create, modify or use a false audiovisual, photographic or audio record that substitutes or impersonates a person, to obtain a benefit or cause harm; doing so increases the fine for the personal-falsehood offense by up to one third.
• The aggravation applies only to the pre-existing personal-falsehood offense; the underlying conduct is punished by a fine, not imprisonment.