Following the announcement made last week by the Ibero-American Data Protection Network (RIPD), the Colombian DPA has launched an inquiry into OpenAI's ChatGPT compliance with Colombian data protection laws. This inquiry seeks to establish if the collection and processing of personal data of Colombian residents via ChatGPT complies with Law 1581 of 2012, and further conforms to standards under the so-called Accountability Principle (Principio de Responsabilidad Demostrada).

In a public statement the Colombian DPA announced that its inquiry is part of a broader, coordinated effort endorsed by the RIPD, a coalition of 12 countries (Portugal, Uruguay, Brazil, Peru, Panama, Costa Rica, Colombia, Chile, Argentina, Spain, Andorra, and Mexico), and of 16 local data protection authorities, which have set out to monitor and oversee ChatGPT, to protect and ensure personal data and data privacy rights.

While the investigation is ongoing, the Colombian DPA has advised users of ChatGPT to review the applicable privacy policy, to carefully consider the appropriateness of providing personal data, and to exercise caution with responses provided by ChatGPT.

The Colombian DPA has a history of actively enforcing compliance with Colombian data protection laws, and this new inquiry follows a trend involving global tech companies against which the Colombian DPA has asserted jurisdiction.