Cookie 同意: Colombia

Colombia's Law 1581 of 2012, with implementing Decree 1377 of 2013, is enforced by the data protection delegate of the SIC. A distinctive feature is the national database registry, the RNBD, where controllers must register their databases of personal data. Consent must be prior, express, and informed, which is closer to the opt-in model, and sensitive data needs explicit consent. The SIC has been an active enforcer, issuing fines for unlawful marketing and data sharing. Privacy policies and notices in Spanish are expected. Cookies that identify users are treated as personal data, and direct marketing requires consent.