Law 1682 of 2001, regulating private information.

This law defines what kind of collection, storage, processing and publishing of personal data is allowed.

The law also forbids the diffusion of “sensitive data” of individuals or identifiable persons, defining as sensitive data the information relating to race or ethnicity, political preferences, moral, philosophical or religious beliefs, data about the sexual life of individuals, and any other data that fosters prejudice and discrimination, affect the dignity, the privacy, and the private image of persons and families.

The infringement of the legislation may be sanctioned with fines imposed by the Civil and Commercial Court (Juzgado en lo Civil y Comercial).