International data transfers under Colombia's Law 1581 of 2012 are allowed whenever (i) the data is transferred to third parties operating under adequate regulatory protection; (ii) the transfer is performed under consent of the data holder or any other legal exception allowing data transfer.

A Declaration of Conformity is the authorization granted by the Superintendency of Industry and Commerce (DPA) to a data controller. It allows a specific data transfer with a prior assessment of the level of protection of the recipient country.

When considering a Declaration of Conformity for an international data transfer, the DPA will request the following aspects about the recipient country. These must be addressed when requesting a Declaration of Conformity.

  • Data protection regulations
  • Principles, rights and duties of data holders, controllers and processors
  • Mechanisms to enforce rights
  • Documents specifying that the relevant regulator is monitoring enforcement
  • Identification of the controllers involved in the data transfer
  • Description of the process to execute the data transfer
  • Purpose of the data transfer
  • Description of the data to be transferred
  • Proof that the recipient country meets an adequate level of protection

Dentons is the world's first polycentric global law firm. A top 20 firm on the Acritas 2015 Global Elite Brand Index, the Firm is committed to challenging the status quo in delivering consistent and uncompromising quality and value in new and inventive ways. Driven to provide clients a competitive edge, and connected to the communities where its clients want to do business, Dentons knows that understanding local cultures is crucial to successfully completing a deal, resolving a dispute or solving a business challenge. Now the world's largest law firm, Dentons' global team builds agile, tailored solutions to meet the local, national and global needs of private and public clients of any size in more than 125 locations serving 50-plus countries.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.