Art. 261 of Decree No. 1165 of 2019 stipulates that the de minimis threshold—the minimum value of goods below which customs duties are not levied—is set at USD 200.

Law No. 1,480 provides a comprehensive framework for consumer protection that also applies to online transactions.

Colombia has signed but not ratified the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Colombia has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Colombia has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

According to Art. 91 of Law No. 633, any webpage of Colombian origin that dedicates its activity to e-commerce must be registered in the commercial registry and provide the National Tax and Customs Directorate (DIAN) with information on economic transactions.

The country has two main instruments regulating data protection: Law No. 1,581 and Decree No. 1,377. Law No. 1,581 establishes the guiding principles of data protection (such as finality, transparency, and confidentiality). Decree No. 1,377 complements and modifies Law No. 1,581. In addition, Law No. 1,266 developed the habeas data, particularly regarding financial, credit, commercial, services, and third countries information.

Pursuant to Art. 4 of Decree No. 1,704, telecommunications providers must keep and store for a period of five years subscribers' personal information, such as identity, billing address, and connection type. This information must be available to the Attorney General or any competent authority in the context of a criminal investigation.

According to Art. 23 of Decree 1,377, controllers and processors should appoint a person or function within the company that assumes responsibility for the protection of personal data tasked with reviewing and solving claims made by data subjects. Furthermore, Title VI of Law No. 1,581 establishes the duties of those responsible for data treatment and in charge of data treatment.

A basic legal framework on intermediary liability for copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

A basic legal framework on intermediary liability beyond copyright infringement is absent in Colombia's law and jurisprudence. The liability regime for damages applicable to Internet intermediaries in Colombia is the same as that generally applied to any other activity, which is a regime of subjective civil liability since the law does not provide for a presumption of fault (or objective) for intermediaries.

Decree No. 1,630 creates a national registry of mobile phones through the adoption of two databases. The negative database contains the IMEI (International Mobile Equipment Identity) of the devices that have been reported as stolen or lost, both in Colombia and abroad, while the positive database includes the mobile equipment imported or legally manufactured in Colombian territory. The latter connects the IMEI with the identity of the user, who is required to provide the telecommunication operators (or mobile telecommunications networks and services providers) with their full name, type and identity document number, address and telephone number. Although there is no mandatory registration of SIM cards, the IMEIs are associated with a specific user. Art. 5 of Decree No. 1,630 states that telecommunications providers must bear the costs of the system that supports the positive and negative databases, which must be managed by an independent legal entity and should guarantee the quality of the service. More regulation on the databases is contained in Resolution No. 3,128.

According to Resolution No. 912, telecom subscribers must provide telecom concessionaires with their name, address, contact number and ID number. The police duplicate this database. Telecommunications service providers authorised to operate must “allow remote queries” to subscriber’s data “via the web through VPN”, which must contain the following information: complete names or registered corporate or trade name; identification number and type or tax identification (for legal entities); address; telephone number; city of residence; mobile number or fixed line number; “ID and FLOTA number” if any; activation date. In case of changes, telecommunications service providers must send updates to DIJIN ("Dirección de Investigación Criminal e INTERPOL de la Policía Nacional") every month (Art. 1 and Annex I).

Colombia's slow customs clearance procedures are reportedly hampering import and export activities. In addition, there have been reports that Colombia has experienced significant delays in implementing crucial customs reforms that would allow traders to submit copies of invoices electronically instead of physical documents.

It is reported that Decree No. 2025 creates burdensome restrictions and administrative requirements for trade in mobile phones. The Decree establishes measures to control the import and export of intelligent mobile phones, cellular mobile phones, and their parts, susceptible to classification under Customs Tariff subheading 8517.12.00.00 and 8517.70.00.00, as part of its strategy to address the theft of mobile phones.
Chapter I of Decree No. 2025 establishes the import conditions of mobile phones. According to Art. 3, mobile phones whose IMEI (International Mobile Equipment Identity) is registered in the databases referred to in Art. 106 of No. Law 1,453 of 2011 may not be imported. But, importation is permitted if: (a) it is an IMEI reported in the positive database, (ii) in the case of import in compliance with a guarantee or (iii) the re-import of previously exported phones. Also, intelligent mobiles can be imported if the travellers carry them when entering the national territory as a personal possession (and no more than three units). Importation is also allowed under the modality of postal traffic and urgent shipments if it is just one mobile/intelligent phone that fulfils customs regulations."
Art. 1 of Decree No. 2,142 amended Art. 3 of Decree No. 2025 (Chapter I), yet the conditions for importing mobile phones remain largely unchanged. While these restrictions predate the amendment, Decree No. 2,142 introduced a more lenient regime allowing the import under the modality of postal traffic and urgent shipments if it is just one mobile/intelligent phone that fulfils customs regulations.