A review of Colombian Law regulating the protection of personal data. Includes a discussion of obligations arising under Law 1581 and Decree 1377, the steep potential sanctions for noncompliance, as well as recommendations for companies to ensure full compliance with the privacy law.