Reminders
If you are interested in learning more about any of the obligations, please contact the following email [email protected]
Companies
There are 4 main duties
Compartir
1.1. Companies under the surveillance of the Superintendence of Companies that (i) as of December 31, 2022, has carried out any kind of business or transactions directly or through a third party, through subordinate Companies or a branch, with foreign individuals or legal entities, equal to or greater than 100 minimum monthly legal wages (COP $116,000,000); and (ii) as of December 31, 2022, has had total income or total assets equal to or greater than 30,000 minimum monthly legal wages (COP $34,800,000,000), must implement a PTEE to identify and evaluate Transnational Bribery risks.
1.2. Companies supervised by the Superintendence of Companies that (i) as of December 31, 2022, directly or indirectly (through consortiums, joint ventures or any other figure permitted by law), has entered into contracts with state entities with an amount equal to or greater than 500 minimum monthly legal wages (COP $580,000,000); and (ii) as of December 31, 2022, has obtained total revenues or have total assets equal to or greater than 30,000 minimum legal wages (COP $34,800,000,000), must implement a PTEE to identify and evaluate Corruption risks.
1.3. Supervised Companies that (i) as of December 31, 2022, directly or indirectly (through consortiums, temporary unions or any other figure allowed by law), has entered into contracts with State Entities equal to or greater than 500 minimun monthly legal wages (COP $580,000,000); (ii) as of December 31, 2022, has obtained total revenues equal to or greater than 3,000 minimum monthly legal wages (COP $3,480,000,000) or total assets equal to or greater than 5.000 minimum monthly legal wages (COP $5,800,000,000) and; (iii) Belong to any of the sectors indicated below, must be obliged to identify and evaluate the Corruption Risks:
1.3.1. Pharmaceutical Sector
Its economic activity registered in the commercial registry must be identified with one of the following ISIC codes: 2011, 2100, 3250 and 4645.
1.3.2. Infrastructure and Construction Sector
Its economic activity registered in the commercial registry is identified with any of the following ISIC codes: 4111, 4112, 4210, 4220 or 4290.
1.3.3. Manufacturing Sector
Its economic activity registered in the commercial registry is identified with one of the following ISIC codes: 1020, 1030, 1040, 1051, 1063, 1071, 1072, 1081, 1082, 1083, 1084, 1089, 1090, 1391, 1399, 1410, 1420, 1430, 1512, 1521, 1522, 1701, 1640, 2013, 2014, 2030, 2219, 2410 and 2651, 2826.
1.3.4. Mining-energy sector
Its economic activity registered in the commercial registry is identified with any of the following ISIC codes: B05, B07, 4662.
1.3.5. Information and communication technology sector
Its economic activity registered in the commercial registry is identified with one of the following ISIC codes: 6120, 6130, 6190, 6209.
1.3.6. Trade of vehicles, their parts, pieces and accessories sector
That its economic activity registered in the commercial registry is identified with one of the following ISIC codes: 4511, 4512, 4530 and G4541.
1.3.7. Financial services auxiliary activities sector
Its economic activity registered in the commercial registry is identified with ISIC code: 6619.
All the entities obliged in accordance with the above-mentioned criteria, must send an official letter to the Superintendence of Companies within 15 working days following the expiration of the term for the adoption of the PTEE, no later than June 23, 2023, informing about their status as obliged subject.
“Informe” 52 – Transparency and Business Ethics Programs
All Companies that have acquired the condition of being obliged to implement the PTEE as of December 31, 2022, must submit Report 52 within the deadlines established by the Superintendency of Companies for these purposes.
(Pending definition by the Superintendence of Companies regarding the deadlines for submitting the “Informe” 52).
Companies monitored or controlled by the Superintendence of Companies that as of December 31, 2022, comply with any of the following requirements, must implement a SAGRILAFT by May 31, 2023:
2.1. Any economic sector
Assets or Total Income as of December 31, 2022, equal to or higher than 40,000 minimum monthly legal wages (COP$ 46,400,000,000).
2.2. Real Estate Agents
- Assets or Total Income as of December 31, 2022, equal to or higher than 40,000 minimum monthly legal wages (COP$46,400,000,000).
- Having within its corporate purpose the possibility of undertaking real estate activities (rendering intermediation services in the purchase, sell, barter or lease of real estate), and
- That in 2022 had undertaken businesses or transactions related with real estate activities for an amount equal or higher to 100 minimum monthly legal wages (COP$116,000,000).
2.3. Commercialization of precious metals and precious stones
- Assets or Total Income as of December 31, 2022, equal to or higher than 30,000 minimum monthly legal wages (COP$34,800,000,000).
- Had regularly undertaken activities in the commercialization of precious metals and precious stones.
2.4. Legal Services
- Assets or Total Income as of December 31, 2022, equal to or higher than 30,000 minimum monthly legal wages (COP$34,800,000,000).
- That its economic activity registered at the Chamber of Commerce, or the activity that generates most income, correspond to the one identified with the code 6910 (CIIU Code Rev. 4 A.C.).
2.5. Accounting services
- Assets or Total Income as of December 31, 2022, equal to or higher than 30,000 minimum monthly legal wages (COP$34,800,000,000).
- That its economic activity registered at the Chamber of Commerce, or the activity that generates most income, correspond to the one identified with the code 6920 (CIIU Code Rev. 4 A.C.).
2.6. Construction of buildings and civil engineering projects
- Assets or Total Income as of December 31, 2022, equal to or higher than 30,000 minimum monthly legal wages (COP$34,800,000,000).
- That its economic activity registered at the Chamber of Commerce, or the activity that generates most income, correspond to the ones identified with the codes 4111, 4112, 4219, 4220 (CIIU Code Rev. 4 A.C.).
2.7. Virtual Assets services
- Total Income as of December 31, 2022, equal to or higher than 3,000 minimum monthly legal wages (COP$3,480,000,000), or Assets equal or higher to 5,000 minimum monthly legal wages (COP$5,800,000,000).
- That undertakes, in its on behalf or on behalf of other individuals or Companies any of the following activities or operations for a value (individually or jointly) equal or higher to 100 minimum monthly legal wages (COP$116,000,000):
a) Trade of virtual assets and fiat coins.
b) Trade of one or more forms of virtual assets.
c) Transfer of virtual assets.
d) Custody or management of virtual assets or instruments that allows control over virtual assets.
e) Participate and providing of financial services related with the offer to an issuer or sell of a virtual asset.
f) In general, services related with virtual assets.
2.8. Special surveillance sectors or regimes
The provisions applicable to the following sectors are found in Chapter IX of the Basic Legal Circular of the Superintendency of Corporations:
a. Management Companies of commercial self-financing plans.
b. Companies that operates libranzas, under the surveillance of the Superintendence of Companies.
c. Companies that undertakes multi-level marketing activities.
d. Livestock funds.
e. Companies that undertake factoring activities, under the surveillance of the Superintendence of Companies.
2.9. Companies that receive capital contributions in virtual assets
Companies that as of December 31, 2022, had received one or more contributions of virtual assets equal to or higher (individually or jointly) than 100 minimum monthly legal wages (COP $116,000,000).
“Informe” 50 – LA/FT/FPADM Risk Prevention
All Companies that complied with the criteria to implement SAGRILAFT on December 31, 2022, must submit Report 50 within the deadlines established by the Superintendence of Companies for these purposes.
(Pending definition by the Superintendence of Companies regarding the deadlines for filing “informe” 50).
Companies that meet the following criteria as of December 31, 2022, must implement the SAGRILAFT minimum measures regime no later than May 31, 2023:
3.1. Have obtained as of December 31, 2022, total income equal to or greater than 3,000 SMLMV (COP $3,480,000,000,000) or had assets equal to or greater than 5,000 (COP $5,800,000,000).
3.2. Belong to one of the following sectors of the economy:
3.2.1 Real Estate Agent
That on a regular basis render intermediation service in the purchase or selling of real estate in favor of its clients
3.2.2 Commercialization of precious metals and precious stones
That on a regular basis trade or commercialize precious metal and stones.
3.2.3. Legal services
That its economic activity registered in the Chamber of Commerce, or the activity that produces the highest income, corresponds to the one identified with ISIC code 6920.
3.2.4. Accounting services
That its economic activity registered in the Chamber of Commerce, or the activity that produces the highest income, corresponds to the one identified with ISIC code 6920.
Section 2.3 from Circular 002 of 2015 issued by the Superintendence of Industry and Commerce, establishes that every year between January 2nd and March 31st updates to the National Data Base Registry must be performed.
The mentioned updates must include any change that the data base has suffered within the previous year, i.e. if the number of data subjects included in the data base changed, if there was any change on the corporate name of the data controller, among others.
Please note that substantial changes, such as those related with the purposes to handle data, the data processor, the attention lines, classification and types of personal data, and international data transfers and transmissions, must be reported within the first 10 business days of the month in which the changes took place.
If by the time of the annual update there are any substantial changes that have not been registered those should be registered at the annual update.
Please note that when a new data base is created, it must be registered within the NDBR within the following two (2) months in which it was created.
Also, it is necessary to perform the corresponding report of claims presented by data subjects in the previous semester; such report must be performed at the NDBR and shall be complemented every semester during the first fifteen (15) business days of February and August; therefore for year 2023 the first report on claims (positive or negative) presented by data subjects must be filed no later than on February 21st 2023 in which the claims performed by data subjects during the previous semester (July to December 2022) must be reported. Also, note that the second report of claims performed by data subject, must be filed on the first fifteen (15) business days of August and therefore this year it must be performed no later than on August 23rd, 2023 (in this case it is necessary to report the claims received from January to June 2023).
At last, it is important to remind you that the companies that must comply with the registry obligation are those with assets of more than 100.000 UVT (for 2023 COP $4.241.200.000), approx. USD$866.589). However, all the entities that perform any data handling activity (i.e. collect, use, storage) must comply with all of the other obligations established in the data protection regulation.
