RegulationsWhich regulations should you keep in mind? The case of Colombia
Patient data. Under Colombian law, health-related data is sensitive data (Law 1581 of 2012, Article 5, regulated by Decree 1377 of 2013), and processing it generally requires the data subject’s explicit authorization (Article 6). That’s why every form, every schedule and every chat is designed around the question of what data is truly needed and who can see it. How we handle data ourselves is set out in our data processing policy.
RIPS and electronic invoicing. Resolution 2275 of 2023 of the Ministry of Health and Social Protection defines the RIPS as the supporting record for the electronic sales invoice in healthcare: it is generated in JSON format and validated by the Ministry’s Single Validation Mechanism (Mecanismo Único de Validación). Resolutions 558 and 1884 of 2024 amended it, among other things regarding its transition period. Generating the RIPS and submitting it for validation is the provider’s responsibility, usually through its billing software.
Health records. Law 2015 of 2020 created the interoperable electronic health record, and Resolution 866 of 2021 defined the clinical data relevant to that interoperability. Health record management is governed by Resolution 1995 of 1999, amended by Resolution 839 of 2017. In July 2026 the Ministry published for comment a draft resolution that would unify the rules on health records; it is a draft, not a regulation in force.
Complaints and grievances (PQRS). External Circular 2023151000000010-5 of 2023 of the National Health Superintendency sets maximum deadlines for resolving healthcare complaints, shorter the greater the risk to the patient. In what we build, the deadline is configured by type of case, and which ones apply to your institution is something we review in the assessment.
This section is for information only: it describes the regulations to guide a project and does not replace legal advice. Compliance is each institution’s responsibility; validate your case with your legal or quality advisor.