Handles health records, in Colombia

Ley 1581 de 2012, arts. 5-7 (Datos Sensibles y Menores) · Read the law's page

• Before processing sensitive personal data, including data revealing racial or ethnic origin, political opinion, religious or philosophical belief, union or human rights organization membership, health, sexual life, or biometric data, obtain the data subject's explicit authorization; processing sensitive personal data is otherwise prohibited.
• Process sensitive personal data without the data subject's explicit authorization only where it protects the data subject's vital interest and they cannot consent, where a not for profit political, philosophical, religious or union body processes it about its own members without disclosing it to third parties, where it is needed to establish, exercise or defend a right in a judicial proceeding, or where it serves a historical, statistical or scientific purpose and the data subject's identity is suppressed.
• Do not process a child's or adolescent's personal data unless it is data of a public nature, and provide children, adolescents and their guardians with information and training on the risks of improper processing and on the safe, responsible use of their personal data.