Duty LXD-6227
Serves under-18s, in Colombia
Ley 1581 de 2012, Sensitive Categories and Children's Datasince 3 lines
Ley 1581 de 2012, arts. 5-7 (Datos Sensibles y Menores) · Read the law's page
- Before processing sensitive personal data, including data revealing racial or ethnic origin, political opinion, religious or philosophical belief, union or human rights organization membership, health, sexual life, or biometric data, obtain the data subject's explicit authorization; processing sensitive personal data is otherwise prohibited.
- Process sensitive personal data without the data subject's explicit authorization only where it protects the data subject's vital interest and they cannot consent, where a not for profit political, philosophical, religious or union body processes it about its own members without disclosing it to third parties, where it is needed to establish, exercise or defend a right in a judicial proceeding, or where it serves a historical, statistical or scientific purpose and the data subject's identity is suppressed.
- Do not process a child's or adolescent's personal data unless it is data of a public nature, and provide children, adolescents and their guardians with information and training on the risks of improper processing and on the safe, responsible use of their personal data.
Decreto 1074 de 2015, Sensitive Data and Children's Data Rulessince 5 lines
Decreto 1074 de 2015, arts. 2.2.2.25.2.3 y 2.2.2.25.2.9 (Datos Sensibles y Datos de Ninos, Ninas y Adolescentes) · Read the law's page
- Do not process sensitive personal data except in the cases article 6 of Ley 1581 de 2012 expressly lists.
- Where processing sensitive data is allowed, tell the data subject that they are not obliged to authorize it; tell them explicitly and beforehand, besides the general requirements of authorization, which of the data to be processed are sensitive and the purpose of the processing; and obtain their express consent.
- Do not condition any activity on the data subject supplying sensitive personal data.
- Do not process the personal data of children and adolescents except data of a public nature; where processing is allowed it must respond to and respect the child's best interests and ensure respect for their fundamental rights.
- Obtain the authorization from the child's legal representative only after the child has been able to exercise the right to be heard, weighing the child's opinion by their maturity, autonomy and capacity to understand the matter.