Colombia enacted Law No. 527 of 1999, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Colombia enacted Decree No. 2,364 of 2012, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

According to Art. 253 of the Decree No. 1165/2019, the value of products delivered by postal traffic must not exceed USD 2,000. Postal traffic corresponds to correspondence, postal packages, or online purchases that arrive in Colombia through the Official Postal Operator Network.

Pursuant to Art. 3 of Decree 2025/2015, imports under the postal traffic and express shipments regime may include a maximum of one smartphone or mobile (cellular) telephone per shipment, provided that the item complies with the applicable customs requirements and the addressee is a natural or legal person. The Decree also prohibits split or fragmented shipments made in the name of the same addressee.
For these purposes, postal traffic refers to correspondence, postal parcels, or online purchases that enter Colombia through the network of the Official Postal Operator.

Under Article 91 of Law 633 of 2000, all websites and Internet sites of "Colombian origin" whose economic activity is commercial, financial or service-related must register with the Commercial Registry and provide information on economic transactions to the National Tax and Customs Directorate (DIAN). The Superintendency of Industry and Commerce and the DIAN (Official Letter 021357) have stated that "if the obligated party is domiciled in Colombia, its website or Internet site shall be of Colombian origin".

According to Art. 4 of Resolution No. 3,596, in the case of sales made through the Internet (virtual payment), airlines and travel agencies may charge an administrative fee different from the fees enshrined in the Resolution, provided that they inform the fee and the sales conditions to the aeronautical authority. This rule provides a different regime for online payments in the aeronautical realm, and it has been suggested that this may hamper online purchases.

Art. 261 of Decree No. 1165 of 2019 stipulates that the de minimis threshold, the minimum value of goods below which customs duties are not levied, is set at USD 200.

Art. 44 of Statutory Law No. 1621 stipulates that telecommunications service operators are obliged, upon request and within the framework of an authorised operation and insofar as technically feasible, to provide intelligence and counterintelligence bodies with the communication histories of the relevant telephone subscribers, the technical identification data of the subscribers under scrutiny, the location of the cells in which their terminals are situated, and any other information that may assist in determining their whereabouts. These bodies must ensure the security of the information received and, for that purpose, must limit their requests to data covering a period not exceeding five years, with such requests to be submitted in writing by the Directors of the intelligence bodies or their duly appointed delegates. Art. 3 establishes that intelligence and counterintelligence functions are undertaken by designated units of the Armed Forces and the National Police, the Financial Information and Analysis Unit (UIAF), and any other bodies empowered by law. Despite the safeguards found in Art. 4, 5, and 15, these requests do not require a court order or warrant.

A basic legal framework on intermediary liability for copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

Decree No. 1,630 creates a national registry of mobile phones through the adoption of two databases. The negative database contains the IMEI (International Mobile Equipment Identity) of the devices that have been reported as stolen or lost, both in Colombia and abroad, while the positive database includes the mobile equipment imported or legally manufactured in Colombian territory. The latter connects the IMEI with the identity of the user, who is required to provide the telecommunication operators (or mobile telecommunications networks and services providers) with their full name, type and identity document number, address and telephone number. Although there is no mandatory registration of SIM cards, the IMEIs are associated with a specific user. Art. 5 of Decree No. 1,630 states that telecommunications providers must bear the costs of the system that supports the positive and negative databases, which must be managed by an independent legal entity and should guarantee the quality of the service. More regulation on the databases is contained in Resolution No. 3,128.

According to Resolution No. 912, telecom subscribers must provide telecom concessionaires with their name, address, contact number and ID number. The police duplicate this database. Telecommunications service providers authorised to operate must “allow remote queries” to subscriber’s data “via the web through VPN”, which must contain the following information: complete names or registered corporate or trade name; identification number and type or tax identification (for legal entities); address; telephone number; city of residence; mobile number or fixed line number; “ID and FLOTA number” if any; activation date. In case of changes, telecommunications service providers must send updates to DIJIN ("Dirección de Investigación Criminal e INTERPOL de la Policía Nacional") every month (Art. 1 and Annex I).

Colombia's slow customs clearance procedures are reportedly hampering import and export activities. In addition, there have been reports that Colombia has experienced significant delays in implementing crucial customs reforms that would allow traders to submit copies of invoices electronically instead of physical documents.

It is reported that Decree No. 2025/2015 creates burdensome restrictions and administrative requirements for trade in mobile phones. The Decree establishes measures to control the import and export of intelligent mobile phones, cellular mobile phones, and their parts, susceptible to classification under Customs Tariff subheading 8517.12.00.00 and 8517.70.00.00, as part of its strategy to address the theft of mobile phones.
In particular, the decree mandates that each mobile phone have a government-issued International Mobile Equipment Identity (IMEI) verification certificate at the time of import and requires all importers and exporters to pre-register with the National Police in order to trade in mobile phones.
Chapter I of Decree No. 2025 establishes the import conditions of mobile phones. According to Art. 3, mobile phones whose IMEI is registered in the databases referred to in Art. 106 of No. Law 1,453 of 2011 may not be imported. But, importation is permitted if: (a) it is an IMEI reported in the positive database, (ii) in the case of import in compliance with a guarantee or (iii) the re-import of previously exported phones. Also, intelligent mobiles can be imported if the travellers carry them when entering the national territory as a personal possession (and no more than three units). Importation is also allowed under the modality of postal traffic and urgent shipments if it is just one mobile/intelligent phone that fulfils customs regulations."
Art. 1 of Decree No. 2,142 amended Art. 3 of Decree No. 2025/2015 (Chapter I), yet the conditions for importing mobile phones remain largely unchanged. While these restrictions predate the amendment, Decree No. 2,142 introduced a more lenient regime allowing the import under the modality of postal traffic and urgent shipments if it is just one mobile/intelligent phone that fulfils customs regulations.

Art. 2.2.19.3 of Decree No. 681 on national audiovisual work for users in Colombia, which implements Art. 154 of the National Development Plan 2018-2022, requires video-on-demand (VOD) platforms that operate in Colombia (such as Amazon Prime, Netflix, HBO, among others) to create an exclusive section that highlights and compiles audiovisual works of Colombian origin.