According to Art. 26 of Law No. 1,581, cross-border transfer of personal data is forbidden unless it is made to a country that offers adequate levels of data protection, as defined by the Colombian data protection authority. The prohibition does not apply in certain cases, including when the data subject authorises the cross-border transfer or when medical data is required for health or public hygiene reasons. According to the law, the institution in charge, "Superintendencia de Industria y Comercio" (SIC), establishes the standards regarding international data transfers.

Art. 5 of Law No. 1,266 establishes that a data transfer between data bank operators is permitted when authorisation is obtained from the data subject or when the destination database has the same purpose as the operator that delivers the data. If the receiver of the data is a foreign data bank, the delivery without authorisation must be done with a written record and due verification that the laws of the recipient of the information offer guarantees for the protection of the rights of the data subject.

According to Art. 13.11 of the First Amending Protocol which amends the Additional Protocol to the Framework Agreement of the Pacific Alliance, the four parties (Chile, Colombia, Peru and Mexico) commit to allowing cross-border information transfers through electronic means, including also the transfer of personal data for business activities. Moreover, in Art. 13.11 bis, the parties commit to ban forced localisation of computer facilities in their national territories.

Colombia is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

Art. 12.5 (Chapter III) of Law No. 590 states that micro, small and medium enterprises (MSMEs) are preferred under equal conditions (price, quality, capacity of supply, and service) in public tenders.

Law No. 816 establishes preference margins to promote domestic goods and services and requires State entities (except residential public utility service providers) to set out the relevant preferences in the procurement documents. Art. 2 states that the preference margin is between 10% and 20% of the total score for tenders of Colombian goods and services and between 5% and 15% for tenders for foreign goods and services incorporating Colombian goods and services components.
In addition, the Government of Colombia applies preference margins and criteria for breaking tie bids to favour national companies. Arts. 20 and 21 of Law No. 80 state that, in equal conditions, national goods or services are preferred.

Art. 471 of the Commercial Code mandates that a foreign company must establish a branch domiciled in Colombia in order to conduct "permanent" business activities within the country. In accordance with Art. 474 of the Code, activities considered "permanent" include acting as a contractor for works or providing services.

There have been frequent complaints about the lack of transparency and rule changes during the award of major government contracts. It has been reported that, despite Law No. 80, transparency, fairness, and truly competitive bidding conditions in many tenders remain uncertain. The Colombian government is also resorting to auctions for the purchase of high-tech or complex equipment. These factors remain significant market access barriers for some companies interested in public sector contracts.

Colombia is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA). However, the country has been an observer of the WTO GPA since 1996.

According to Art. 15 of Law 9 of 1991, the general regime for the investment of foreign capital in the country and Colombian investments abroad is established by the National Government. With the exception of those matters relating to the transfer of resources abroad, foreign investment in Colombia shall be treated for all purposes in the same manner as the investment of Colombian nationals.

Art. 471 of the Commerce Code stipulates that for a foreign company to engage in "permanent" business in Colombia, it must set up a branch domiciled in the country. According to Art. 474 of the Code, activities deemed "permanent" include:
- Opening commercial establishments or business offices;
- Intervening as a contractor of works or provision of services;
- Obtaining a concession from the Colombian State (or if the State has formally given up rights through another title) or participating in some way in the exploitation of a concession;
- The fact that associate assemblies, board of directors, or administration of a foreign company are operating in the national territory.

It is reported that the provision of data processing and information services in Colombia necessitates the establishment of a formal commercial presence.

According to Art. 5 of the Internet News Information Service Management Regulations, Internet news providers are required to obtain a permit to provide Internet news information services to the social public through Internet websites, application software, forums, blogs, microblogs, public accounts, instant messaging tools, online live streaming, and other such methods. Pursuant to Art. 6 of the regulations, the applicant’s person-in-charge or chief editor must be a Chinese citizen. In addition, the applicant must separately obtain an Internet Information Service license or file procedures with the telecommunications authorities in accordance with the law. In addition, according to Art. 6, to apply for an Internet news information service license, one must have places, facilities, and funds suitable for the service. The Regulations on Administrative Enforcement Procedures for Internet Information Content set out the procedural and administrative processes for the Cyberspace Administration of China to enforce the laws and regulations relating to Internet content.
These provisions broadened the definition of “internet news information services” to “services of collecting, editing, and releasing internet news information; reposting such news information; and providing a platform to spread such news information.” They also broaden the definition of “news information” to include relevant reports and commentaries on politics, the economy, military affairs, foreign affairs, and other public affairs, as well as relevant reports and commentaries on social emergencies.