The country has two main instruments regulating data protection: Law No. 1,581 and Decree No. 1,377. Law No. 1,581 establishes the guiding principles of data protection (such as finality, transparency, and confidentiality). Decree No. 1,377 complements and modifies Law No. 1,581. In addition, Law No. 1,266 developed the habeas data, particularly regarding financial, credit, commercial, services, and information from third countries.

Pursuant to Art. 4 of Decree No. 1,704, telecommunications providers must keep and store for a period of five years subscribers' personal information, such as identity, billing address, and connection type. This information must be available to the Attorney General or any competent authority in the context of a criminal investigation.

Colombia is a party to the Patent Cooperation Treaty (PCT).

Colombia has a copyright regime under Law No. 23. However, the exceptions do not follow the fair use or fair dealing model, therefore limiting the lawful use of copyrighted work by others. Arts. 31-44 list the exceptions, which include the use of literary or artistic works or parts thereof as illustrations in works intended for educational purposes; and the reproduction, distribution, and communication to the public of news or other information relating to facts or events that have been publicly disseminated by the press or by broadcasting; among others.
Moreover, Colombia is a member of the Andean Community of Nations and is subject to Decision 351, issued in 1993. Art. 22 of the Decision sets forth a list of mandatory exceptions in the internal market but also allows the adoption of additional exceptions in the domestic law of members, as long as they comply with the international standards of the so-called three-step test.

Colombia is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

Art. 20 of Law No. 80 establishes the principle of reciprocity for the participation of foreign investors in public procurement, under which foreign bidders are entitled to the same treatment that Colombian companies receive in the countries of origin of the foreign bidders.
In addition, Art. 6 of Law No. 1,150 of 2007, together with Art. 3 of Decree No. 1,510 of 2013, requires bidders established in Colombia (including foreign branches) to be enrolled in the Single Bidders Register (Registro Único de Proponentes, RUP) in order to contract with the State. As a general rule, registration in the RUP operates as a condition for participation in public procurement procedures. However, the most recent WTO Trade Review indicates that foreign firms established abroad may participate without RUP registration.
The RUP is intended to facilitate access to procurement opportunities and functions as an ex ante mechanism for verifying legal, administrative, and related eligibility requirements prior to participation in competitive tendering processes. The enrolment fee set in 2024 is COP 741,000 (approx. USD 200), which has been reported as a potential obstacle to participation in government procurement.

Art. 12.5 (Chapter III) of Law No. 590 states that micro, small and medium enterprises (MSMEs) are preferred under equal conditions (price, quality, capacity of supply, and service) in public tenders.

Pursuant to Law No. 816, public administration entities that, under the applicable contracting regime, must select contractors through tenders, calls for bids, or public competitions are required to apply objective evaluation criteria that favour domestic industry. Art. 2 provides that bids offering goods and services of Colombian origin benefit from a margin of preference of 10% to 20%, while bids offering foreign goods and services that incorporate inputs of Colombian origin benefit from a margin of preference of 5% to 15%. The concept of “origin” for services was amended by Decree No. 680 of 2021 to encompass the domestic goods and labour required to supply those services.

Art. 35 of Law No. 2069 of 2020 establishes the tie-break mechanism applicable to public procurement processes. Where two or more bids obtain the same total score, the contracting entity must apply a series of criteria sequentially and exclusively, in the order listed, while ensuring consistency with Colombia’s international commitments, until the tie is resolved. The first criterion is a preference for national goods and services over foreign goods and services. Other criteria include the preference for companies employing at least 10% of the workforce that is indigenous, Black/Afro-Colombian, Raizal, Palenquero, and Gypsy populations, and a preference for bids submitted by SMEs, cooperatives, or mutual associations.

There have been frequent complaints about the lack of transparency and rule changes during the award of major government contracts. It has been reported that, despite Law No. 80, transparency, fairness, and truly competitive bidding conditions in many tenders remain uncertain. These factors remain significant market access barriers for some companies interested in public sector contracts.

Colombia is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA). However, the country has been an observer of the WTO GPA since 1996.

According to Art. 15 of Law 9 of 1991, the general regime for the investment of foreign capital in the country and Colombian investments abroad is established by the National Government. With the exception of those matters relating to the transfer of resources abroad, foreign investment in Colombia shall be treated for all purposes in the same manner as the investment of Colombian nationals.

It is reported that the provision of data processing and information services in Colombia necessitates the establishment of a formal commercial presence.