Companies are reminded that during the first 15 labor days of August claims by holders must be submitted before Colombia's Superintendence of Industry and Commerce (SIC) for the first semester of 2019. (See Holland & Knight alert, "New Requirements for Colombia's National Registry of Databases," August 15, 2018.)

Please find below the key dates of the National Registry of Databases (NRD):

  • From 2019, during the first 15 labor days of February and August: Submit the information related to holders' complaints
  • From Jan. 2 to March 31, 2020: General update of the information registered in the NRD
  • During the first 10 labor days of each month: When the databases registered in the NRD had significant changes A change is considered significant when it is related to: 1) the database purpose, 2) the person in charge of the treatment, 3) service channels for holders of the information, 4) the classification or type of personal data that is stored, 5) the security measures implemented by the company, 6) the privacy policy and 7) the international transmission and/or transference of personal data.
  • Security incidents: It is an obligation to inform any security incident during the 15 labor days following the detection of this incident.