This chapter is structured as a practical guide specifically designed for foreign investors conducting business in Colombia. Rather than merely providing a theoretical overview of local regulations, it is developed under the principle of “International Regulatory Compatibility.”
The rigorous and strategic implementation of Colombia’s risk management systems—including personal data protection, anti-money laundering (AML) measures, and corporate ethics and compliance programs—not only ensures compliance with Colombian authorities but also serves as a preventive safeguard against extraterritorial regulations, such as the U.S. Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act.
Information is the most valuable asset. Colombian law requires strict compliance with the principles of lawfulness, prior consent, and security in the processing of personal data, including the obligation to register databases with the National Database Registry (Registro Nacional de Bases de Datos – RNBD).
Transition from a reactive approach to a self-managed risk prevention system for anti-money laundering (AML), counter-terrorist financing (CTF), and counter-proliferation financing (CPF), through the appointment of a Compliance Officer and the reporting of suspicious transactions to the Financial Information and Analysis Unit (Unidad de Información y Análisis Financiero – UIAF).
Implementation of the Business Transparency and Ethics Program (PTEE) as a legal safeguard against domestic corruption and transnational bribery, including third-party due diligence and protected whistleblowing channels.
Legal implementation of ESG principles as a key requirement for attracting foreign investment, including the voluntary adoption of Benefit and Collective Interest Company (BIC) status and its associated tax and public procurement benefits.
Compliance with local regulations is not merely an administrative burden, but an essential preventive safeguard against extraterritorial laws, such as the U.S. Foreign Corrupt Practices Act (FCPA) and the UK Bribery Act.
In this chapter
Chapter 03 contents
3.1 Personal Data Protection and Transfer
Habeas Data regime supervised by the Superintendence of Industry and Commerce (SIC): data subject principles and rights, the National Database Registry, and rules governing the international transfer and transmission of personal data.
3.2 Risk Prevention: Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Counter-Proliferation Financing (CPF) of Weapons of Mass Destruction (WMD).
The Self-Control and Risk Management System (SAGRILAFT), obligated entities, the role of the Compliance Officer, and reporting obligations to the Financial Information and Analysis Unit (UIAF).
3.3 Business Ethics and Other Common Compliance Obligations
Business Transparency and Ethics Programs (PTEE) to prevent corruption and transnational bribery, and key internal policies such as procurement manuals and whistleblowing channels.
3.4 Corporate Social Responsibility (CSR) and Sustainability
Mandatory obligations and voluntary CSR standards, ESG criteria, and corporate structures such as Benefit and Collective Interest Companies (BIC Companies).
Take This Chapter with You
Download Chapter 03 as a PDF, or download the complete guide
We are part of your team
PROCOLOMBIA is the entity in charge of promoting Exports, International Tourism, Foreign Direct Investment and the Country Brand, in order to position Colombia in the world. Get to know the national and international network of offices, where you will find comprehensive support and advice.