Colombia
Colombia has no comprehensive AI law, though Law 2502 of 2025 raises the fine for impersonation carried out with AI. The government's 2025 AI bill and several earlier proposals were archived, and a new bill, PL 025/2026C, was filed in the House of Representatives on July 21, 2026. Its rapporteurs filed a positive first-debate report in the House's Sixth Committee in late September 2026, proposing a 34-article text with risk tiers, prohibited uses, labeling of synthetic content, a national AI committee, and fines. A national AI policy framework guides public action, and existing data protection law binds AI systems today.
Key points
- The government's 2025 AI bill and earlier bills were archived; PL 025/2026C, filed July 21, 2026, has a positive first-debate report in the House's Sixth Committee as of late September 2026, with the committee vote pending.
- National policy documents frame a rights-focused, sector-aware approach.
- Statutory data protection law (Law 1581 of 2012 regime) applies to AI processing personal data.
- Law 2502 of 2025 raises the criminal fine for impersonation using AI, including deepfakes, by up to one third from July 28, 2026.
Laws and instruments
AI bills (multiple)
Successive proposals focused on data protection, algorithmic fairness, and sectoral ethics. The government's 2025 bill and several earlier ones were archived. PL 025/2026C revives it: the rapporteurs' first-debate report, filed in the Sixth Committee in late September 2026, proposes a 34-article text with unacceptable-risk and high-impact tiers, a ban on social scoring by public authorities and on real-time remote biometric identification for mass surveillance, labeling of synthetic content, human oversight and a right to explanation, a National AI Committee, regulatory sandboxes, a register of high-impact AI actors, fines of up to 3,000 monthly minimum wages or 150% of the economic benefit, and staggered entry into force. The committee's first debate is pending. None enacted.
Law 2502 of 2025 (AI impersonation)
Amends Article 296 of the Penal Code so the fine for personal falsity rises by up to one third when the impersonation uses AI, and defines deepfakes. It directs the government, prosecutors, and police to adopt a public policy on deceptive AI within two years.
Timeline
- 2019 onwardAI policy documents adopted.
- 2023 to 2026Successive AI bills introduced; the government's 2025 bill and several others archived.
- July 28, 2025Law 2502 of 2025 adds an AI aggravating factor to the crime of impersonation.
- July 21, 2026PL 025/2026C filed in the House of Representatives.
- July 28, 2026The higher fine for impersonation using AI under Law 2502 takes effect.
- September 2026The rapporteurs file a positive first-debate report on PL 025/2026C in the Sixth Committee.
- September 15, 2026The Sixth Committee holds a technical round table on PL 025/2026C.
Who it applies to
AI systems processing personal data in Colombia fall under existing data protection law. AI-specific duties depend on which bill, if any, advances.
Penalties
Data protection enforcement through the SIC. Law 2502 of 2025 raises the criminal fine for impersonation using AI by up to one third. As proposed for first debate, PL 025/2026C would set fines of up to 500 monthly minimum wages for minor infractions, 1,500 or 100% of the economic benefit for serious ones, and 3,000 or 150% of the benefit, with suspension or closure of the system, for the most serious.
Common questions
Does Colombia have a comprehensive AI law?
What are the penalties for AI violations in Colombia?
Who does AI regulation in Colombia apply to?
Artificial Intelligence Regulations, "AI Regulation in Colombia," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/colombia.html.
Entries state the position as of the review date and link to the primary text for verification.