Allende & Brea – Estudio Jurídico

This report cannot be considered as legal or any other kind of advice by Allende & Brea. For any questions, do not hesitate to contact us.

Colombia approves Binding Corporate Rules on data protection for international insurance group

On December 5, 2024, the Superintendence of Industry and Commerce of Colombia issued Resolution No. 76809, through which it certified the Binding Corporate Rules (BCR) of the business group to which Willis Towers Watson Colombia Corredores de Seguros S.A. belongs.

The original request had been submitted on January 26, 2023. After a detailed analysis, and once the company had addressed technical observations, the regulatory authority concluded that all the requirements established in Decree 1074 of 2015, as amended by Decree 255 of 2022, were met.

The approved BCR are defined as mandatory policies, principles of good governance, or codes of good business practices adopted by the data controller established in Colombian territory, in order to perform transfers of personal data to a controller located outside the Colombian territory and that is part of the same business group. In this case, Willis Towers Watson will be able to process and transfer data cross-border from Colombia to other entities of the group abroad, under legally enforceable conditions and with appropriate safeguards for the protection of personal data.

It is important to note mention this is the first approval of BCR in Colombia under the regulatory framework established by Decree 255 of 2022, setting a precedent in the national regulation of international personal data transfers.

This report cannot be considered as legal or any other kind of advice by Allende & Brea. For any questions, do not hesitate to contact us.

Related areas