Columbia’s data protection law, officially published on October 18, 2012, as Statute Law No. 1581, is now in effect. Modeled after the EU Data Protection Directive, the law introduces several requirements for any entity controlling or processing personal data within Colombia (with some exceptions). Colombia is the latest Latin American country to enact personal data protection laws modeled on the EU framework, joining Argentina, Costa Rica, Mexico, Peru, and Uruguay. Notably, the Colombian law (similar to some of the other Latin American laws) lacks a breach notification provision. The Colombian government expects to issue implementing regulations soon.