The Superintendence of Industry and Commerce (SIC) of Colombia issued External Circular No. 2 of 2024, establishing guidelines regarding personal data processed through artificial intelligence (AI) systems.

This circular underscores the critical importance of secure environments that comply with current regulations prior to the initiation of any processing of personal data and even before the collection of information. Principles such as necessity, suitability, reasonableness and proportionality must be considered when using AI systems to process personal data.

It is crucial to note the importance of carrying out a privacy impact study, which is reiterated in the circular. Guidelines on the minimum information that such a study must contain are also provided.

The circular also establishes recommendations regarding the use of differential privacy techniques, through which an analysis of the information collected is allowed, without allowing the identification of personal data owners.