ColombiaCódigo Penal, Falsedad Personal, AI Deepfake Aggravation
Ley 599 de 2000, art. 296 (as amended by Ley 2502 de 2025)
In force since .
An AI prohibited practices rule binding public and private bodies.
- Enforcement body
- Fiscalia General de la Nacion
- Obligation class
- Prohibition
- Audit expectation
- none
- Setting the rule reaches
- General
What it requires
- Do not use artificial intelligence to create, modify or use a false audiovisual, photographic or audio record that substitutes or impersonates a person, to obtain a benefit or cause harm; doing so increases the fine for the personal-falsehood offense by up to one third.
- The aggravation applies only to the pre-existing personal-falsehood offense; the underlying conduct is punished by a fine, not imprisonment.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
- NIST AI 600-1
- GAI-RISK-08Information Integrity
- GAI-RISK-11Obscene, Degrading, and/or Abusive Content
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-005System Acceptance Testing
- ETSI EN 304 223
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
The base personal-falsehood offense (art. 296) is punished by a fine, with no term of imprisonment stated; when committed using artificial intelligence, the fine is increased by up to one third.
What it makes you log
Logging duty
Article 296, as amended, increases the fine for the personal-falsehood offense by up to one third when committed using artificial intelligence; it states no duty to create, keep, or produce any record. Ley 2502 de 2025's own article 5 requires the Fiscalía General de la Nación to maintain a case-tracking register of AI-enabled personal-falsehood cases, containing the methodologies used, their impact, and the judicial measures applied, with access restricted to judicial-police, judiciary, and security entities and an annual report to Congress, but article 5 is a separate provision of the same enacting law, not article 296 itself.
- Kind
- None
- As of
What this law does
Article 296 of the Codigo Penal punishes with a fine whoever, to obtain a benefit for themselves or another or to cause harm, substitutes or impersonates a person or attributes to themselves a name, age, marital status, or capacity with legal effects, provided the conduct does not constitute another offense; the article carries no term of imprisonment.
Ley 2502 de 2025 added a second paragraph providing that when the personal falsehood is committed using artificial intelligence, the fine is increased by up to one third, and article 2 defines a deepfake as the creation, modification, or use of a false audiovisual record, including photographs, videos, images or sound recordings, made through artificial intelligence so that it appears to be a real person's authentic speech or conduct.
Article 6 of Ley 2502 de 2025 delayed this amendment's commencement to one year after the law's sanction and promulgation on , so the deepfake aggravation itself entered into force on , while the law's other provisions, including its definitions and its public-policy directives to the National Government, the Fiscalia and the Policia Nacional, took effect immediately on sanction.
When LexLint raises it
When your app profile says your app generates audio with AI, generates images with AI, generates video with AI or processes biometric data.
Back to the example · Lint your app
Page updated .