Analyzing critical legal trends and developments across data, cyber, AI and digital regulations from around the world and beyond borders

Organizations domiciled in Colombia can now adopt the international standard ISO/IEC 42001:2023, which will make them among the first organizations in Latin America to have a certifiable standard for the responsible management of artificial intelligence (AI) systems.

What is ISO/IEC 42001:2023?

This international standard sets out requirements for establishing, maintaining, and continually improving an AI management system, applicable to any organization that develops or uses AI-based solutions, regardless of size or sector.


Key takeaways

Key news for Colombia:

  • International certification: Colombian organizations can now certify their AI management systems under a globally recognized standard, building trust with clients, investors, and authorities.
  • Alignment with public policy: This adoption supports Colombia’s national AI strategy, promoting responsible innovation, transparency, risk management, and the protection of fundamental rights.
  • Competitive advantages: Certification under ISO/IEC 42001:2023 will help Colombian companies differentiate themselves in international markets and comply with emerging regulatory requirements.

Standard highlights:

  • Governance and leadership in AI
  • AI-specific risk assessment and treatment
  • Operational controls throughout the AI system lifecycle
  • Continuous improvement and auditing
  • Integration with other standards (ISO 9001, ISO/IEC 27001, ISO/IEC 27701)

Why is this important? The adoption of ISO/IEC 42001:2023 in Colombia is a milestone for trust, ethics, and competitiveness in AI. Certified organizations will be able to demonstrate responsibility, transparency, and compliance to clients and regulators.

Next steps: We recommend reviewing your current AI practices and considering alignment with this standard. Our Baker McKenzie team is ready to support you with assessment, implementation, and certification of ISO/IEC 42001:2023.

Additional information

Please do not hesitate to contact us in case you have any questions or require our advice.

Spanish version

Author

Angelica Navarro is a partner in Baker McKenzie’s Bogotá office. She is a lawyer from Pontificia Universidad Javeriana in Bogotá, where she also completed a specialization in Administrative Law. She holds an LL.M. from the University of California, Berkeley, awarded through the Colfuturo Scholarship. She served as an advisor to the Superintendent of Industry and Commerce on antitrust and merger control. Prior to that, she was an adviser to the director of the National Protection Unit, where she was in charge of the formulation and execution on protection and human rights programs.

Author

Carolina Pardo is a lawyer and specialist in International Contract Law graduated from Universidad de los Andes. She obtained a LL.M. with specialization in International Private Law and Competition Law from the London School of Economics and Political Science. Over 20 years, she has advised major national and international clients on matters related to compliance with data protection, competition and consumer law rules. She has also successfully coordinated and prepared proposals for submission to national authorities on behalf of major industrial groups in Colombia.

Author

Carlos Ignacio Arboleda is a Lawyer graduated from Pontificia Universidad Javeriana in Bogota. He holds a post-graduate course in Competition Law and Free Trade from the same University and earned an LL.M. degree from the University of Chicago.

Author

Julieth Sanclemente is a senior associate within the competition law, consumer protection and protection of personal data practices; and has 9 years of experience in these areas. Julieth is a lawyer from the University of Los Andes (Bogotá) and has a master's degree (LL.M) by the London School of Economics and Political Sciences, specialized in competition, innovation and commercial law (London).Julieth has 9 years of experience in the competition law, consumer protection, protection of personal data and intellectual property practices.