ColombiaDecreto 1074 de 2015, National Database Registry (Registro Nacional de Bases de Datos)
Decreto 1074 de 2015, arts. 2.2.2.26.1.1 a 2.2.2.26.3.4 (Registro Nacional de Bases de Datos)
In force since .
A comprehensive regime rule binding public and private bodies.
- Obligation class
- Licensing, Reporting
- Audit expectation
- none
What it requires
- If you are a company or non-profit entity with total assets above 100,000 UVT, or a public legal entity, register each database that contains personal data you process in the Registro Nacional de Bases de Datos, each one separately.
- Register a database created after the registration deadlines within two months of its creation.
- Register at least the controller's and any processor's identification and contact data, the channels for data subjects to exercise their rights, the name and purpose of the database, whether processing is manual or automated, and the processing policy; registering the policy does not excuse making it known to data subjects.
- Update the registration when the Superintendencia de Industria y Comercio defines a change as substantial.
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Chapter 26 requires registration of each database and an update of the registration on a substantial change. It sets no log, record of processing or keeping period beyond the registry entry the controller files with the Superintendencia, so the row records no logging duty. The chapter carries no territorial scope clause, so no territorial hook is recorded.
- Kind
- None
- As of
What this law does
Decreto 886 de 2014, which Chapter 26 of Decreto 1074 de 2015 compiles, entered into force on . Companies and non-profit entities with total assets above 100,000 UVT, and public legal entities, must register their databases. A controller must register each database that holds personal data separately. A database created after the registration deadlines must be registered within two months of its creation.
The registry holds the controller's identification and contact data, those of any processor, the channels for data subjects to exercise their rights, the name and purpose of the database, whether processing is manual or automated, and the processing policy.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .