The Bill was introduced on 28 July 2025 and seeks to establish a comprehensive regulatory framework for the development, use, and governance of artificial intelligence (AI) in Colombia. Its main objective is to ensure the ethical, responsible, competitive, and innovative deployment of AI, protecting fundamental rights and promoting sustainable development. It draws on existing frameworks in Europe and the wider Latin America region. In this article, we examine some of the key principles that underpin the proposed legislation.

The law would apply to all individuals and entities, public or private, involved in any stage of the AI systems lifecycle—design, development, implementation, operation, commercialisation, or use—when the system is developed, used, or has effects in Colombia, or employs data of Colombian origin. 

The regulation of AI under the Bill is based on principles such as human oversight, diversity and inclusion, social and environmental well-being, ethics, transparency, responsible innovation, privacy, proportionality, respect for fundamental rights, environmental protection, economic development, technological sovereignty, adaptability, multi-stakeholder collaboration, and free competition. 

AI systems are classified into four risk categories: 

• Critical risk: Systems that may seriously violate fundamental rights or the public interest (e.g. subliminal manipulation, social profiling, remote biometric identification by authorities). Their use is prohibited except under strict conditions. 

• High risk: Systems with a high potential impact on health, safety, or rights (e.g. education, employment, public services, justice). They require compliance assessments, risk management, transparency and human oversight. 

• Transparency obligations: Systems that interact with people or generate/manipulate realistic content (e.g. deepfakes) must clearly disclose their artificial nature. 

• Minimal or zero risk: Systems that fall outside of the above categories. Developers and users are encouraged to adopt good practices on a voluntary-basis. 

The Ministry of Science, Technology, and Innovation has been assigned as the national authority for AI under the Bill and is responsible for technical guidance, coordination, and oversight. A multi-sector committee and a National Advisory Council of AI Experts will support governance and policy development. 

The law encourages research, innovation, and the creation of regulatory sandboxes for safe experimentation. It mandates the integration of AI education at all levels, with a focus on inclusion, regional development, and workforce transition. 

Clear responsibilities are established for AI developers, suppliers, implementers, and users. Administrative and, in the future, criminal sanctions are envisaged for noncompliance, prioritising corrective and educational measures over punitive ones. 

Colombia’s new AI Bill introduces a comprehensive, risk-based framework aimed at ensuring ethical and responsible AI use, with strong oversight and clear obligations for all stakeholders. It follows other recent AI developments in the country, including an amendment to the Penal Code and preliminary discussions regarding a new, separate AI law. The Penal Code amendment introduces a specific aggravating offence for cases of identity fraud committed through the use of AI, including the creation of deepfakes and digital identity theft. 

Much like countries in the wider region, the Colombian government is clearly focused on tackling the regulation of AI. While the Bill is still in its early legislative stages, employers in Colombia should start preparing for compliance. Many will already have started the process of mapping out which AI systems are used within their organisation, qualifying these AI systems based on their risk level and stopping the use of any AI systems which carry an unacceptable level of risk.  As the regulatory landscape evolves, early preparation will be key to ensuring both legal compliance and responsible innovation.