Following the provisions of External Letter 003 of 2020, the Superintendence of Industry and Commerce extended the deadline for the update of the information in the National Registry of Databases to July 3th of 2020.

The update of the information in the National Registry of Databases is the one to be performed annually between January 2 and March 31, but that the Superintendence of Industry and commerce decided to postpone since the national government declared the Economic, Social and Ecologic State of Emergency in Colombia. 

We recommend taking advantage of the extension of this obligation, to review the security measures adopted by your company for the effective protection of personal data. In this regard, check if you have: 

1. A general information policy.
2. A document with security controls for the outsourcing of services. 
3. A document on risk management in the processing of personal data. 
4. An information security management system and a comprehensive personal data program. 
5. A policy for controlling access to personal data and devices management.
6. An implemented policy for the correct processing of personal data at different stages of the data lifecycle. 
7. An implemented personal information security incident management policy and procedures to its application.
8. A policy for security audits of personal data processing.

We are at your complete service to attend any inquiries related to this procedure.