Based on the investigation carried out by the Deputy Superintendence for Data Protection against two complaints: RAPPI and Banco Falabella, the Superintendence of Industry and Commerce (the Superindustry) imposed a fine of COP$298 million pesos and COP$496 million pesos, respectively.
In both cases, the Superindustry determined that RAPPY and BANCO FALABELLA must adopt measures to respect the rights of individuals regarding the treatment of their personal information.
The National Authority on Data Protection concluded that both companies disregarded users requests by which they asked for the elimination of their telephone numbers from their databases with the purpose of not receiving more commercial information.
In both cases, the SIC concluded that both companies did not respect the person's right to suppress their personal information where these were used for advertising purposes.
http://www.sic.gov.co/Rappi-y-Banco-Falabella-sancionados-por-incumplir-Ley-de-Proteccion-de-Datos