Country: Colombia
Meet Colombia’s identity regulation without slowing your customers down
Each Colombian regulation, translated into what it requires from your company and how UNICUS supports it.
Regulation
| Regulation | What it requires from your company | How UNICUS supports it |
|---|---|---|
| Statutory Law 2573 of 2026 | Sufficient and reasonable digital security measures to verify identity and documents when customers acquire products; a dynamic burden of proof in impersonation cases | 3D liveness, ID document verification and an evidence record for every verification |
| Financial Superintendence (SFC) Basic Legal Circular (C.E. 006 of 2025) | For supervised entities: effective identity verification in remote onboarding; strong authentication mechanisms, including biometrics | 3D facial biometrics and fingerprints as a strong factor; audit trail for reviews |
| Law 1581 of 2012 (personal data) | Prior, express authorization for sensitive data such as biometrics; an informed purpose; security | Biometric processing notice and authorization inside the flow, with a record of acceptance; encryption |
| SIC External Circular 001 of 2025 | Fintechs: reinforced security measures for biometric data | Encryption at rest with managed keys, role-based access control, retention policies |
Statutory Law 2573 of 2026
- What it requires from your company
- Sufficient and reasonable digital security measures to verify identity and documents when customers acquire products; a dynamic burden of proof in impersonation cases
- How UNICUS supports it
- 3D liveness, ID document verification and an evidence record for every verification
Financial Superintendence (SFC) Basic Legal Circular (C.E. 006 of 2025)
- What it requires from your company
- For supervised entities: effective identity verification in remote onboarding; strong authentication mechanisms, including biometrics
- How UNICUS supports it
- 3D facial biometrics and fingerprints as a strong factor; audit trail for reviews
Law 1581 of 2012 (personal data)
- What it requires from your company
- Prior, express authorization for sensitive data such as biometrics; an informed purpose; security
- How UNICUS supports it
- Biometric processing notice and authorization inside the flow, with a record of acceptance; encryption
SIC External Circular 001 of 2025
- What it requires from your company
- Fintechs: reinforced security measures for biometric data
- How UNICUS supports it
- Encryption at rest with managed keys, role-based access control, retention policies
Supported documents
- Citizenship ID card (yellow, with holograms)
- Digital ID card
- Foreigner ID card (cédula de extranjería)
- Passport
- Temporary Protection Permit (PPT)
UNICUS also verifies identity documents from other countries. Ask us about yours.
Compliance guides
PDFLaw 2573 of 2026: the burden of proof is now yours
PDFDoes your biometric platform meet the SFC Basic Legal Circular?
PDFDeepfakes: why 2D liveness is no longer enough
Book a 30-minute assessment
This content is informational and is not legal advice. It covers Colombian regulation only.