Yes, using a VPN is legal in Colombia, but compliance with local cybersecurity and data protection laws is mandatory. The Ministry of Information and Communications Technologies (MinTIC) permits VPNs for legitimate purposes, such as enhancing privacy or accessing corporate networks, while prohibiting their use for circumventing legal obligations or engaging in illicit activities.
Key Regulations for Using a VPN in Colombia
- Cybersecurity Law 1273 of 2009 criminalizes unauthorized access to computer systems, meaning VPNs cannot be used to bypass security measures or commit cybercrimes. Violations may result in fines or imprisonment under Article 269F of the Penal Code.
- Data Protection Law 1581 of 2012 (regulated by the Superintendence of Industry and Commerce) requires VPN providers to ensure user data is processed lawfully. Logging or sharing user activity without consent violates these provisions.
- Decree 2364 of 2012 mandates that ISPs and VPN services retain connection logs for at least two years if requested by authorities under Law 1621 of 2013 (intelligence and counter-terrorism measures). Non-compliance risks service suspension.
Practical Considerations While VPNs are legal, their misuse—such as masking illegal downloads, fraud, or defamation—can trigger criminal liability. The 2026 National Cybersecurity Strategy further empowers MinTIC to monitor VPN traffic for threats, increasing scrutiny on providers. Users should select reputable services that comply with Colombian data retention policies to avoid legal exposure.