According to Law 1581 of 2012 and Decree 1377 of 2013, all individuals and legal entities that handle personal data must inform about the existence of such information in their databases.
Holders of personal data must inform that the personal data will be treated in the strictest and most confidential manner, and that the information is stored in a manner which prevents access by third persons.
If the individual is interested in removing personal data from the databases, he/she must write within the following 30 working days from notification of the personal data holder to expressly indicate the intention that his/her data be removed from the databases. If no information is received, the holder of the personal data will assume that it has an authorization to use the personal data for communications.
Every individual may exercise the right to know, update, correct or suppress the information provided in data bases within the terms established by Law 1581 of 2012.
