The National Government, within the anti-red tape campaign, issued Decree 090 of January 18, 2018, which reduces the number of legal entities required to comply with the National Database Registration before the Superintendency of Industry and Commerce.
This is a consequence of the fact that approximately twenty-five percent (25%) of the total legal entities and less than one percent (1%) of natural persons have registered their databases.
Thus, according to the aforementioned decree, those exempt from carrying out the database registration are companies and non-profit entities classified as micro and small enterprises, as well as natural persons, that have assets less than $3,316 million.
It should be noted that although this type of companies are not required to carry out the Database Registration before the Superintendency of Industry and Commerce, they are still obliged to comply with the parameters of the personal data protection law, Law 1581 of 2012, regarding the personal data processing policy within the company; the procedures established to request and authorize the processing of personal data; the confidentiality agreements established with any personnel who have access to confidential information, and to have the privacy policy visible by electronic means.