Colombia’s Law 2502 of 2025 adds an aggravating factor to identity theft committed using AI, increasing penalties and formally recognizing deepfakes. It mandates traceability systems and coordinated public policy to address AI-related crimes. The law also strengthens biometric data protections, requiring explicit consent and strict processing safeguards. Implementation begins July 2026, reflecting Colombia’s commitment to digital ethics and cybersecurity.