# How Is Colombia Shaping Its AI Regulatory Framework?

Savannah Jenkins · October 19, 2026

> Colombia’s Emerging AI Governance Model Colombia is shaping its regulatory framework through a sectoral, risk-aware approach that builds on existing...

## Colombia’s Emerging AI Governance Model

Colombia is shaping its regulatory framework through a sectoral, risk-aware approach that builds on existing laws rather than immediately adopting a comprehensive artificial intelligence statute. The country’s AI policy roadmap and ethical guidelines establish principles such as human oversight, transparency, equity, and accountability. Proposed legislation would create rules for high-impact systems, define governance responsibilities, and strengthen protections against discrimination and misuse. Existing legislation on personal data, privacy, intellectual property, consumer rights, and administrative decisions provides additional legal safeguards. In regulated fields, including health, INVIMA’s oversight mechanisms may become relevant when AI supports clinical decisions, medical devices, or clinical-trial processes.

**Also worth reading:** [What Does Colombia's AI Governance Framework Design Need to Get Right?](https://agustin-otegui.com/knowledge/what_does_colombias_ai_governance_framework_design_need_to_get_right.php) · [How Do You Build an Enterprise Agent Evaluation Framework That Works?](https://agustin-otegui.com/knowledge/how_do_you_build_an_enterprise_agent_evaluation_framework_that_works.php) · [How Can an AI Consulting ROI Framework Measure Real Business Impact?](https://agustin-otegui.com/knowledge/how_can_an_ai_consulting_roi_framework_measure_real_business_impact.php)

Colombia’s emerging model resembles the European Union AI Act in its emphasis on risk classification, but deliberate institutional differences could make it more adaptable. Colombia could focus on regulatory sandboxes, technical standards, public procurement requirements, and coordination among existing authorities rather than creating an entirely new enforcement agency. The principal challenge will be translating broad principles into enforceable duties while addressing algorithmic bias, opacity, and automated decision-making. Continued engagement with universities, civil society, and industry will be essential for balancing innovation with public trust and ensuring that AI governance reflects Colombia’s social and institutional context.

## Draft Rules and Regulatory Roadmap

Colombia is beginning to shape an AI governance model inspired by the European Union’s risk-based framework, but its emerging rules remain fragmented across sectoral regulators, public institutions, and private initiatives. A reported effort to copy the EU AI Act offers a useful foundation, while developments identified by Brigard Urrutia suggest growing attention to accountability, transparency, and the responsible use of algorithmic systems. The Artificial Intelligence Initiative at Columbia Law School and its “Ungoverned: AI, Accountability, and the Limits of Law” roundtable provide comparative insights into how legal institutions can address rapid technological change without imposing rigid rules. Columbia Law School’s approach combining AI fluency with critical thinking also highlights the importance of education, institutional capacity, and interdisciplinary governance.

For Colombia, the central challenge is coordination. Oversight currently distributed among agencies can create gaps, duplication, and regulatory uncertainty, especially for high-impact applications. A adaptable national roadmap should establish risk tiers, transparency and human-oversight duties, and enforceable mechanisms for redress. INVIMA’s clinical trial approval pathway may offer a relevant model: a clear, staged process combining technical review, continuous oversight, and adaptation as risks emerge. Rather than adopting the EU framework wholesale, Colombia could develop context-specific rules that protect fundamental rights while preserving experimentation, investment, and responsible innovation.

## Sectoral Oversight and Institutional Roles

Colombia is shaping its artificial intelligence regulatory framework through a combination of sector-specific oversight, institutional adaptation, and an emerging legislative agenda. Recent regulatory analysis describes Colombia as preparing a close adaptation of the European Union’s AI Act, suggesting that the country is borrowing a risk-based structure while tailoring it to local administrative capacity and public priorities. At the same time, the discussion is not limited to a single national statute. Colombian authorities are developing broader approaches to accountability, transparency, and the appropriate limits of legal intervention in a rapidly evolving technology landscape.

The reference to Columbia Law School’s Artificial Intelligence Initiative and its roundtable on AI, accountability, and the limits of law highlights the role of legal scholarship in informing this process. Academic institutions can help policymakers understand how existing rules apply to algorithmic systems and how oversight should be distributed among government, industry, and courts. Sectoral bodies such as INVIMA may also retain significant authority where AI affects regulated products and procedures, including clinical trials and health-related technologies. This layered model could explain how Colombia balances comprehensive AI governance with the specialized institutional expertise required for high-impact domains, although the country’s success will depend on clear responsibilities, meaningful enforcement, and continued engagement with comparative regulatory frameworks.

## Alignment With Global AI Standards

Colombia is shaping its artificial intelligence framework through a combination of sectoral regulation, legislative proposals, and institutional guidance. Existing laws governing personal data, consumer protection, public administration, health, and children already constrain AI systems in important ways. Legislative initiatives inspired by the European Union’s AI Act propose risk-based classifications, transparency duties, oversight mechanisms, and protections for high-impact uses, although commentators caution that directly copying the European model may not fit Colombia’s legal institutions or economic conditions. The emerging approach is therefore better understood as an incremental adaptation of global standards rather than a settled, comprehensive regime.

Colombia’s regulatory development also reflects the need to balance innovation with accountability, particularly in areas such as healthcare, where INVIMA oversees clinical trials and medical-device pathways. Columbia Law School’s Artificial Intelligence Initiative and its discussion of AI accountability further emphasize that legal safeguards must be matched by AI literacy, critical thinking, and interdisciplinary governance. For organizations operating in Colombia, the practical path forward is to combine compliance with applicable sectoral rules, monitoring of pending legislation, and implementation of voluntary risk-management practices aligned with frameworks such as the EU AI Act, OECD AI Principles, and NIST AI Risk Management Framework.

## Business Implications for AI Deployment

Colombia is shaping its AI regulatory framework through a combination of government guidance, sector-specific oversight, and proposals influenced by the European Union’s AI Act. However, recent assessments suggest that emerging Colombian rules may become a simplified or “poor copy” rather than a comprehensive adaptation. Colombia has not yet enacted a unified AI statute comparable to the EU framework, leaving companies to navigate existing data protection, consumer protection, telecommunications, health, and financial regulations. INVIMA’s oversight of clinical trials remains particularly relevant to AI-enabled healthcare, while institutions such as Columbia Law School’s Artificial Intelligence Initiative are promoting research and informed policy dialogue.

For businesses, this fragmented environment creates immediate deployment implications. Companies should conduct use-case-specific risk assessments, document training-data governance, establish human oversight, and monitor whether proposed legislation will impose transparency, conformity, or accountability obligations. AI systems serving Colombian consumers should be designed for explainability, privacy by default, and traceability from the outset. Firms should also avoid treating voluntary government guidance as a substitute for compliance, because regulatory expectations may change as Colombia’s framework develops. Early engagement with local counsel and regulators is therefore a strategic advantage, especially for high-impact applications in healthcare, finance, employment, and essential services.

## Colombia AI Regulation Compared

| Source | Colombia’s AI regulatory development | Comparison or significance |
| --- | --- | --- |
| Tech Policy Press | Colombia is developing an AI framework strongly influenced by the EU AI Act. | Its risk-based structure resembles Europe’s approach, but adaptation to Colombian institutions and priorities may be uneven. |
| Brigard Urrutia | Regulatory analysis focuses on Colombia’s emerging legislation, implementation strategy, and governance responsibilities. | The framework could establish baseline rules for transparency, accountability, and oversight as national AI adoption accelerates. |
| Columbia Law School | Research and initiatives examine AI’s legal, policy, and societal effects, including governance limits. | The “Ungoverned” roundtable highlights that law cannot fully resolve AI accountability, bias, and institutional constraints. |
| INVIMA | Colombia’s regulator operates approval pathways for health technologies and medicines, creating experience for oversight of AI-enabled products. | INVIMA’s sectoral expertise may support adaptive regulation, although AI-specific standards and institutional authority require clarification. |

Colombia is shaping an AI regulatory framework primarily through sectoral governance, policy experimentation, and proposals influenced by the EU AI Act. Its emerging approach emphasizes risk classification, transparency, accountability, and the possible role of INVIMA in oversight. However, Colombia faces the challenge of adapting international regulatory models to its institutional capacity, local priorities, and diverse sectors. The result may combine legislative ambition with continued dependence on existing authorities and fragmented implementation mechanisms.

## Quick answers

### Is there a comprehensive AI law in Colombia?

Colombia is developing a comprehensive AI regulatory framework through a phased legislative and policy roadmap rather than a single enacted statute.

### Which authorities oversee artificial intelligence in Colombia?

The oversight landscape involves multiple public institutions, including the Ministry of Science, Technology and Innovation, with sectoral regulators responsible for regulated industries.

### How could Colombia’s framework compare with the EU AI Act?

Colombia’s proposed model is influenced by European risk-based principles while reflecting local administrative, legal and institutional conditions.

### What should organizations do to prepare for compliance?

Organizations should inventory AI use cases, assess risk levels, document governance controls and monitor Colombia’s evolving legislative and regulatory guidance.

Canonical: https://agustin-otegui.com/knowledge/how_is_colombia_shaping_its_ai_regulatory_framework.php
Markdown: https://agustin-otegui.com/knowledge/how_is_colombia_shaping_its_ai_regulatory_framework.php/index.md