Detailed overview
Colombia does not currently have a single horizontal AI Act. Its AI framework is based on national AI policy, data protection, sector-specific regulation and targeted legal provisions.
CONPES 4144 — National AI Policy
Colombia adopted CONPES 4144, the National Artificial Intelligence Policy, in 2025. The policy sets a national AI direction until 2030 and includes more than 100 actions. It covers AI governance, innovation, infrastructure, data, skills, public-sector use and responsible development.
The National AI Policy is a policy framework rather than a comprehensive AI statute. It does not create one general AI licence or one AI-specific penalty table for all businesses.
Law 2502/2025 — AI aggravator
Colombia has also introduced targeted AI-related criminal-law treatment. Under Law 2502 of 2025, where false personal representation is carried out using AI and causes harm to a third party or public interest, the applicable fine may be increased by up to one third.
Existing-law overlays
AI systems processing personal data must comply with Colombia's data-protection framework. AI used in finance, healthcare, employment, education, consumer services, telecommunications, public administration or digital platforms may also trigger sectoral obligations.
Penalties
Penalties in Colombia depend on the underlying legal regime. AI-related liability may arise under data protection, consumer protection, criminal law, financial regulation, healthcare regulation, employment law, telecommunications regulation or civil liability.