• Login
    • Advanced search
    • Title
    • Channel
    • Module
  • Home
  • Client Solutions
    • Digital Transformation
    • Energy Transition
    • Supply Chains
    • Sustainability and ESG
    • Workforce Redesign
  • Sectors
    • Consumer Goods & Retail
    • Energy, Mining & Infrastructure
    • Financial Institutions
    • Healthcare & Life Sciences
    • Industrials, Manufacturing & Transportation
    • Technology
  • Learning Resources
    • Podcasts
    • Video Chats
    • Webinars
  • Area of Law
    • Antitrust & Competition
    • Artificial Intelligence
    • Banking & Finance
    • Capital Markets
    • Cybersecurity & Data Privacy
    • Data & Technology
    • Dispute Resolution
    • Employment & Compensation
    • Environment & Climate Change
    • Financial Services Regulatory
    • Inclusion, Diversity & Equity
    • Intellectual Property
    • International Commercial & Trade
    • Investigations, Compliance & Ethics
    • Mergers & Acquisitions
    • Pensions
    • Private Equity
    • Projects
    • Real Estate
    • Restructuring & Insolvency
    • Tax
  • Location
    • International

    • International
    • Asia Pacific

    • Australia
    • China
    • Hong Kong
    • Indonesia
    • Japan
    • Malaysia
    • South Korea (Korea, Republic of)
    • Singapore
    • Taipei
    • Thailand
    • Philippines
    • Vietnam
    • EMEA

    • Austria
    • Bahrain
    • Belgium
    • Czech Republic
    • Egypt
    • EU
    • France
    • Germany
    • Hungary
    • Italy
    • Kazakhstan
    • Luxembourg
    • Morocco
    • Netherlands
    • Poland
    • Portugal
    • Qatar
    • Russian Federation
    • Saudi Arabia
    • South Africa
    • Spain
    • Sweden
    • Switzerland
    • Türkiye
    • Ukraine
    • United Arab Emirates
    • United Kingdom
    • North America

    • Canada
    • United States
    • Latin America

    • Argentina
    • Brazil
    • Colombia
    • Chile
    • Mexico
    • Peru
    • Venezuela
Baker McKenzie InsightPlus Home
      • Title
      • Channel
      • Module
    • Hit ENTER to search in content
    • Advanced search
    • Login
  • Home
  • Client Solutions
    • Digital Transformation
    • Energy Transition
    • Supply Chains
    • Sustainability and ESG
    • Workforce Redesign
  • Sectors
    • Consumer Goods & Retail
    • Energy, Mining & Infrastructure
    • Financial Institutions
    • Healthcare & Life Sciences
    • Industrials, Manufacturing & Transportation
    • Technology
  • Learning Resources
    • Podcasts
    • Video Chats
    • Webinars
  • Area of Law
    • Antitrust & Competition
    • Artificial Intelligence
    • Banking & Finance
    • Capital Markets
    • Cybersecurity & Data Privacy
    • Data & Technology
    • Dispute Resolution
    • Employment & Compensation
    • Environment & Climate Change
    • Financial Services Regulatory
    • Inclusion, Diversity & Equity
    • Intellectual Property
    • International Commercial & Trade
    • Investigations, Compliance & Ethics
    • Mergers & Acquisitions
    • Pensions
    • Private Equity
    • Projects
    • Real Estate
    • Restructuring & Insolvency
    • Tax
  • Location
    • International

    • International
    • Asia Pacific

    • Australia
    • China
    • Hong Kong
    • Indonesia
    • Japan
    • Malaysia
    • South Korea (Korea, Republic of)
    • Singapore
    • Taipei
    • Thailand
    • Philippines
    • Vietnam
    • EMEA

    • Austria
    • Bahrain
    • Belgium
    • Czech Republic
    • Egypt
    • EU
    • France
    • Germany
    • Hungary
    • Italy
    • Kazakhstan
    • Luxembourg
    • Morocco
    • Netherlands
    • Poland
    • Portugal
    • Qatar
    • Russian Federation
    • Saudi Arabia
    • South Africa
    • Spain
    • Sweden
    • Switzerland
    • Türkiye
    • Ukraine
    • United Arab Emirates
    • United Kingdom
    • North America

    • Canada
    • United States
    • Latin America

    • Argentina
    • Brazil
    • Colombia
    • Chile
    • Mexico
    • Peru
    • Venezuela
  1. Investigations, Compliance & Ethics
  2. Colombia: External Circular No. 002 of 7 October 2025 — New SIC guidelines for the registration of technology transfer contracts

Colombia: External Circular No. 002 of 7 October 2025 — New SIC guidelines for the registration of technology transfer contracts

21 Oct 2025    2 minute read
    • Share by email
    • Share on
    • Twitter
    • LinkedIn
    • Facebook
    • Google plus
    • Get link
    • Get QR Code
    • Download
    • Print
Technology Transfer Compliance Personal Data Protection International Data Transfers Accountability in Data Processing CI Featured Content

In brief

On 7 October 2025, the Superintendence of Industry and Commerce (SIC) issued the External Circular No. 002 of 2025 ("Circular"), establishing new guidelines and requirements for the registration of technology transfer contracts in Colombia in which personal data is transferred.

This Circular updates and clarifies the procedures for the registration, modification and cancellation of contracts involving technology transfer, technical assistance and trademark licenses, among others, in which personal data is transferred or the object is the processing of personal data.


Contents

Key points

The SIC instructs data controllers and data processors that process personal data of data subjects located in Colombia, in the context of technology transfer processes in which personal data are transferred or in which technologies that allow or have as object the processing of personal data are transferred, in the following obligations:

  • Preliminary verification of regulatory compliance
    • Technology providers and recipients must identify whether the transferred technology involves the processing of personal data and, if so, describe and characterize such functionalities.
    • To assess that the technology complies with personal data protection regulations.
    • If personal data are transferred as part of the process, compliance with the rules for international data transfers should be ensured, where applicable.
  • Accountability
    • Effective mechanisms in place to demonstrate compliance, such as:
      • Identifying, measuring and controlling risks at all stages of personal data processing.
      • Establish risk management systems proportionate to the impact on the right to data protection.
      • Document decisions and mitigation measures taken.
      • Define and execute corrective actions before implementing the transferred technology.
  • Include data protection by design and by default: In technology transfer processes, it is recommended to incorporate personal data protection measures by design and by default, as part of the principle of accountability. The technological architecture should integrate principles such as freedom, necessity, and confidentiality. Security measures must be adapted to the type of technology, context, and associated risks. Additionally, data collection should be limited to what is strictly necessary, promoting data minimization and anonymization or pseudonymization whenever possible.
  • In contracts related to technology transfer, it is recommended to include clauses regarding the processing of personal data. These should define the responsibilities of the parties, technical and administrative measures to ensure data security, guarantees for international data transmissions, and mechanisms for supervision and auditing.

Additional information

For further information, you may consult External Circular No. 002 of 2025.

*****

Click here to read the Spanish version.

Contact Information
María Carolina Pardo Cuéllar
Partner
Bogota
Read my Bio
carolina.pardo@bakermckenzie.com
Angelica Navarro Acevedo
Partner
Bogota
Read my Bio
angelica.navarro@bakermckenzie.com
Carlos Arboleda
Associate
Bogota
Read my Bio
carlos.arboleda@bakermckenzie.com
Julieth Sanclemente Perez
Associate
Bogota
Read my Bio
julieth.sanclemente@bakermckenzie.com

Copyright © 2025 Baker & McKenzie. All rights reserved. Ownership: This documentation and content (Content) is a proprietary resource owned exclusively by Baker McKenzie (meaning Baker & McKenzie International and its member firms). The Content is protected under international copyright conventions. Use of this Content does not of itself create a contractual relationship, nor any attorney/client relationship, between Baker McKenzie and any person. Non-reliance and exclusion: All Content is for informational purposes only and may not reflect the most current legal and regulatory developments. All summaries of the laws, regulations and practice are subject to change. The Content is not offered as legal or professional advice for any specific matter. It is not intended to be a substitute for reference to (and compliance with) the detailed provisions of applicable laws, rules, regulations or forms. Legal advice should always be sought before taking any action or refraining from taking any action based on any Content. Baker McKenzie and the editors and the contributing authors do not guarantee the accuracy of the Content and expressly disclaim any and all liability to any person in respect of the consequences of anything done or permitted to be done or omitted to be done wholly or partly in reliance upon the whole or any part of the Content. The Content may contain links to external websites and external websites may link to the Content. Baker McKenzie is not responsible for the content or operation of any such external sites and disclaims all liability, howsoever occurring, in respect of the content or operation of any such external websites. Attorney Advertising: This Content may qualify as “Attorney Advertising” requiring notice in some jurisdictions. To the extent that this Content may qualify as Attorney Advertising, PRIOR RESULTS DO NOT GUARANTEE A SIMILAR OUTCOME. Reproduction: Reproduction of reasonable portions of the Content is permitted provided that (i) such reproductions are made available free of charge and for non-commercial purposes, (ii) such reproductions are properly attributed to Baker McKenzie, (iii) the portion of the Content being reproduced is not altered or made available in a manner that modifies the Content or presents the Content being reproduced in a false light and (iv) notice is made to the disclaimers included on the Content. The permission to re-copy does not allow for incorporation of any substantial portion of the Content in any work or publication, whether in hard copy, electronic or any other form or for commercial purposes.

Delete Comment ?

Are you sure want to delete comment ?

Get link
Embed
Share by email
Get QR Code

Scan this QR Code to share this content

  •  
  •  
  •  
HighQ
Copyright Baker McKenzie 2025 | Disclaimers | Supplemental Privacy Statement