Date filed
24 June 2021
Countries of harm
Current status


On 24 June 2021, a Colombian NGO representing an individual consumer filed a complaint against a non-Colombian company operating in the Colombian information services sector at NCP Colombia. The complaint alleges that the company breached Colombian laws on protection of personal data and consumer protection. The complaint is based on a decision of the Colombian Superintendence of Industry and Commerce (SIC) against the company, which found that the company had violated personal data protection law.

The complainant requested the NCP offer its good offices to resolve the issues.

Relevant OECD Guidelines


On 31 January 2022, NCP Colombia published its initial assessment in which it rejected the complaint. In its decision, the NCP referred to past legal proceedings in the Colombian judicial system (in which the company had been fined for its actions) and inadequate substantiation of the company’s alleged breaches and the complainant. The NCP stated that it was not a mechanism to enforce judicial rulings or orders issued by a national authority.

More details

Company in violation
Affected people
Date rejected / concluded
31 January 2022