Colombia’s Law 2502 of 2025 adds an aggravating factor to identity theft committed using AI, increasing penalties and formally recognizing deepfakes. It mandates traceability systems and coordinated public policy to address AI-related crimes. The law also strengthens biometric data protections, requiring explicit consent and strict processing safeguards. Implementation begins July 2026, reflecting Colombia’s commitment to digital ethics and cybersecurity.
Author
Bibiana Cala
BrowsingBibiana Cala is a lawyer with more than 22 years of experience in criminal litigation. She is a specialist in criminal law and intellectual property, with a master’s degree in Ibero-American compliance.
Her professional practice has focused mainly on corporate criminal law, corporate fraud and corruption. She has advised national and international companies from different sectors of the economy and has successfully defended the rights and interests of companies and their executives in criminal proceedings, as well as their relations with the different state bodies and authorities.
Thanks to her knowledge in different areas of law, she has worked as co-author of important publications related to corruption, cyber-piracy and criminal law and the criminal protection of industrial property rights in Colombia.
She was an advisor at the Ministry of Justice, position in which she intervened in the elaboration of decisions of the Andean Community of Nations.
In 2012 she joined Baker McKenzie as an associate and is currently the partner in charge of the Firm’s corporate criminal law practice.