LexLint.ioBeta

Know the law your code answers to.

Law / Colombia

SIC Circular on AI, Data Subject Rights

SIC Circular Externa 002 de 2024, instrucciones VII, X (Derechos de los Titulares en Sistemas de IA)

In force since .

A data subject rights rule binding public and private bodies.

Obligation class
Data subject rights, Disclosure
Audit expectation
none

What it requires

  • Let a data subject obtain, at any time and without restriction, information about how an artificial intelligence system is processing their personal data.NIST Privacy FrameworkCM.AW-P3
  • Put in place pertinent, efficient and demonstrable strategies for an artificial intelligence system to guarantee the data subject rights that Ley 1266 de 2008 and Ley 1581 de 2012 and their implementing decrees establish.NIST Privacy FrameworkCT.PO-P3

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MEASURE 2.9The AI model is explained, validated, and documented, and AI system output is interpreted within its context – as identified in the MAP function – to inform responsible use and governance.
NIST Privacy Framework
  • CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
  • CM.AW-P3System/product/service design enables data processing visibility.
FINOS AIGF

Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law

What it makes you log

Logging duty

Instruction X requires the processing of personal data in an artificial intelligence system to provide pertinent, efficient and demonstrable strategies to guarantee the data subject's rights. The text names no log, contents, period or body that may demand the showing; Instruction VII, on the right to information about the processing, is a disclosure right and sets no record duty.

Kind
Implicit
As of
Provision
Instruction X
Trigger
personal_data_processing

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Instruction VII requires an administrator of personal data to guarantee a data subject's right to obtain information about how an artificial intelligence system is processing their personal data, at any time and without restriction.

Instruction X requires the treatment of personal data in an artificial intelligence system to provide pertinent, efficient and demonstrable strategies to guarantee the data subject rights that Ley 1266 de 2008, Ley 1581 de 2012, and their implementing decrees establish.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .