Pursuant to Art. 3 of Decree 2025/2015, imports under the postal traffic and express shipments regime may include a maximum of one smartphone or mobile (cellular) telephone per shipment, provided that the item complies with the applicable customs requirements and the addressee is a natural or legal person. The Decree also prohibits split or fragmented shipments made in the name of the same addressee.
For these purposes, postal traffic refers to correspondence, postal parcels, or online purchases that enter Colombia through the network of the Official Postal Operator.

Under Article 91 of Law 633 of 2000, all websites and Internet sites of "Colombian origin" whose economic activity is commercial, financial or service-related must register with the Commercial Registry and provide information on economic transactions to the National Tax and Customs Directorate (DIAN). The Superintendency of Industry and Commerce and the DIAN (Official Letter 021357) have stated that "if the obligated party is domiciled in Colombia, its website or Internet site shall be of Colombian origin".

According to Art. 4 of Resolution No. 3,596, in the case of sales made through the Internet (virtual payment), airlines and travel agencies may charge an administrative fee different from the fees enshrined in the Resolution, provided that they inform the fee and the sales conditions to the aeronautical authority. This rule provides a different regime for online payments in the aeronautical realm, and it has been suggested that this may hamper online purchases.

Art. 261 of Decree No. 1165 of 2019 stipulates that the de minimis threshold, the minimum value of goods below which customs duties are not levied, is set at USD 200.

Law No. 1,480 provides a comprehensive framework for consumer protection that also applies to online transactions.

Colombia has signed but not ratified the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Colombia enacted Law No. 527 of 1999, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Colombia enacted Decree No. 2,364 of 2012, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

Section 9 of Decree No. 1074 of 2015 regulates the conformity assessment procedure. There is a mandatory certification of cellular devices.
According to Art. 2.2.1.7.9.2 of the Decree, the country accepts a Self-Declaration of Conformity (SDoC). However, a testing laboratory recognised by the regulator ICONTEC (“Instituto Colombiano de Normas Técnicas y Certificación”) must test the equipment, and the supplier must register the equipment with the regulator.
Circular No. 060 deals with safety levels regarding human exposure to radiofrequency electromagnetic fields and lists the following products to be homologated: fixed-wireline desktop and wall-mounted, cellular-mobile, cellular-fixed, PCS-mobile, PCS-fixed, dual-cellular PCS, and satellite.

Art. 44 of Statutory Law No. 1621 stipulates that telecommunications service operators are obliged, upon request and within the framework of an authorised operation and insofar as technically feasible, to provide intelligence and counterintelligence bodies with the communication histories of the relevant telephone subscribers, the technical identification data of the subscribers under scrutiny, the location of the cells in which their terminals are situated, and any other information that may assist in determining their whereabouts. These bodies must ensure the security of the information received and, for that purpose, must limit their requests to data covering a period not exceeding five years, with such requests to be submitted in writing by the Directors of the intelligence bodies or their duly appointed delegates. Art. 3 establishes that intelligence and counterintelligence functions are undertaken by designated units of the Armed Forces and the National Police, the Financial Information and Analysis Unit (UIAF), and any other bodies empowered by law. Despite the safeguards found in Art. 4, 5, and 15, these requests do not require a court order or warrant.

A basic legal framework on intermediary liability for copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

Decree No. 1,630 creates a national registry of mobile phones through the adoption of two databases. The negative database contains the IMEI (International Mobile Equipment Identity) of the devices that have been reported as stolen or lost, both in Colombia and abroad, while the positive database includes the mobile equipment imported or legally manufactured in Colombian territory. The latter connects the IMEI with the identity of the user, who is required to provide the telecommunication operators (or mobile telecommunications networks and services providers) with their full name, type and identity document number, address and telephone number. Although there is no mandatory registration of SIM cards, the IMEIs are associated with a specific user. Art. 5 of Decree No. 1,630 states that telecommunications providers must bear the costs of the system that supports the positive and negative databases, which must be managed by an independent legal entity and should guarantee the quality of the service. More regulation on the databases is contained in Resolution No. 3,128.

According to Resolution No. 912, telecom subscribers must provide telecom concessionaires with their name, address, contact number and ID number. The police duplicate this database. Telecommunications service providers authorised to operate must “allow remote queries” to subscriber’s data “via the web through VPN”, which must contain the following information: complete names or registered corporate or trade name; identification number and type or tax identification (for legal entities); address; telephone number; city of residence; mobile number or fixed line number; “ID and FLOTA number” if any; activation date. In case of changes, telecommunications service providers must send updates to DIJIN ("Dirección de Investigación Criminal e INTERPOL de la Policía Nacional") every month (Art. 1 and Annex I).

Colombia's slow customs clearance procedures are reportedly hampering import and export activities. In addition, there have been reports that Colombia has experienced significant delays in implementing crucial customs reforms that would allow traders to submit copies of invoices electronically instead of physical documents.