Colombia's data protection authority, Superintendencia de Industria y Comercio, has announced it has imposed fines of 496,899,600 and 298,121,760 pesos to Banco Falabella and delivery startup Rappi respectively for failure to implement data protection policies. Following citizen complaints, investigations revealed the organizations improperly used data for either advertising and marketing purposes, while neither responded to consumers' data claims within the government-mandated 15-day period. Banco Falabella responded to its claim a year and a half after it was originally made, and Rappi took more than four months to respond to its complaint. In addition to the fines, the SIC has ordered the data controllers to establish, implement and maintain comprehensive data protection programs to ensure the protection of data subjects' rights.
If you want to comment on this post, you need to login.