Anti-Corruption 2025

Last Updated November 22, 2024

Colombia

Law and Practice

Authors



Baker McKenzie is a leading global law firm. In Colombia, the firm’s five-person connected compliance team provides expert guidance to both local and international clients on a wide range of corporate compliance matters. Led by Carolina Pardo, a recognised authority with over 20 years of experience in the field, the team has expertise in internal investigations, the design and implementation of ABC and AML programmes, representation before regulators and authorities, as well as practical day-to-day advice. With a strong presence in key jurisdictions across Latin America, including Mexico and Brazil, as well as a global reach, the firm is well positioned to collaborate with teams worldwide. This enables it to deliver advice that is not only consistent but also tailored to the complexities of multijurisdictional matters. The team’s experience spans a diverse range of industry sectors, such as technology, telecommunications, life sciences, and automotive, among many others.

  • The Inter-American Convention Against Corruptionwas signed in Caracas on 29 March 1996 and ratified by Colombia through Law 412 of 1997. This convention aims to promote and strengthen mechanisms to prevent, detect, sanction, and eradicate corruption, as well as foster co-operation among member states to ensure the effectiveness of anti-corruption measures and actions.
  • The United Nations Convention Against Corruption (UNCAC) was adopted on 31 October 2003 and ratified by Colombia through Law 970 of 2005. Its objectives include strengthening measures to prevent and combat corruption more effectively, facilitating international co-operation and technical assistance in the fight against corruption, and promoting integrity in public affairs management.
  • The OECD Anti-Bribery Convention was adopted in Paris on 31 November 1997 and ratified by Colombia through Law 1573 of 2012. This instrument focuses on combating the bribery of foreign public officials, a crime that undermines good governance and distorts competitive conditions in international trade.

These conventions reinforce Colombia’s strategy to prevent and punish corruption both domestically and internationally.

The main national regulations applicable to anti-corruption are Law 1474 of 2011, Law 2195 of 2022 and the Colombian Criminal Code (Law 599 of 2000). All relevant corruption offences are laid down in such regulations.

From an administrative standpoint, the Superintendence of Companies has issued Chapter XIII of the Basic Legal Circular regulating the implementation of a business transparency and ethics programme.

From an administrative standpoint, no key amendments have been brought to the national legislation over the past year. However, the issuance of Decree 1122 on 30 August 2024 has introduced regulations for both Law 1474 of 2011 and Law 2195 of 2022, mandating that all public entities adopt transparency and ethics programmes.

Bribery is defined as the offering, giving, promising, receiving, or soliciting of any item of value to influence the actions of an individual in a public or private position. Both offering and accepting a bribe constitute criminal offences.

Additional activities qualifying as offences include:

  • offering benefits to witnesses to alter their testimony; and
  • promising benefits to a company executive or employee in exchange for an unjustified advantage that harms the company.

Corporations are legally required to implement compliance programmes to prevent bribery. Failure to do so can result in fines or even disqualification from contracting with the State.

Although Colombian law does not explicitly regulate hospitality expenses, such as travel, meals, or promotional expenditures, companies are encouraged to adopt internal compliance policies to ensure such expenses do not create a perception of undue influence. Facilitation payments are similarly undefined under Colombian regulations but may be interpreted as bribery depending on the context and intent.

Public officials are broadly defined to include members of public corporations, state employees, and workers of decentralised entities. This definition also covers individuals performing public functions on behalf of the state and employees of state-controlled companies when their relationship with the state is legal and regulatory in nature.

Bribery of foreign public officials is criminalised under Article 433 of the Criminal Code, aligning with the OECD Anti-Bribery Convention. This provision covers the offering, promising, or giving of benefits to foreign public officials to influence their actions in international business transactions. Penalties include imprisonment ranging from nine to 15 years, fines, and disqualification from holding public office for equivalent periods.

Private bribery is also a criminal offence under Article 250-A of the Criminal Code. It is punishable by imprisonment of four to eight years and fines ranging from 10 to 1,000 legal monthly minimum wages (COP13,000,000 or approximately USD3,000 to COP1,300,000,000 or approximately USD300,000).

Influence peddling is a criminal offence in Colombia, applicable to both public servants and private individuals. For public servants, this offence is defined as the misuse of influence derived from their position to secure an advantage for themselves or a third party from another public official in matters under their jurisdiction. Penalties include four to eight years of imprisonment, fines ranging from 100 to 200 legal monthly minimum wages (COP130,000,000 or approximately USD30,000 to COP260,000,000 or approximately USD60,000), and disqualification from holding public office for five to eight years.

Private individuals who improperly influence public officials to secure undue benefits are subject to equivalent penalties, ensuring accountability for all parties involved in corrupt practices.

Colombian law also criminalises influence peddling involving foreign public officials. In line with the United Nations Convention against Corruption, which Colombia has ratified, the law penalises promises, offers, or grants of undue benefits to foreign officials or others for the misuse of their influence. Additionally, Colombia adheres to the OECD Anti-Bribery Convention, which holds individuals and corporations accountable for bribery and influence peddling in international transactions. This includes administrative, civil, and criminal liabilities for companies that facilitate or engage in such practices.

Offences Related to Inaccurate Corporate Books, Records, and False Information

In Colombia, criminal and administrative frameworks address offences involving inaccurate corporate books and records, as well as the dissemination of false information. These are primarily regulated by the Penal Code and enforced by bodies such as the Superintendence of Companies and the Superintendence of Finance.

Falsification of Private Documents

This offence pertains to the alteration or creation of false private documents with the intent to deceive and cause harm. It includes the manipulation of corporate records to present inaccurate information. The Supreme Court of Justice has addressed cases where falsified documents were used to obtain undue financial benefits, such as fraudulent tax refunds.

Concealment of Private Documents

This involves hiding documents to obstruct their use as evidence or to distort the truth in legal or administrative matters. In a corporate context, it may include concealing financial or accounting records to evade audits or investigations.

Regulation of Corporate Books and Records

Colombian law mandates that corporate and accounting books accurately and truthfully reflect a company’s financial operations. This requirement is enforced by the Superintendence of Companies and the Financial Superintendence.

Dissemination of False Information

Providing false information in a corporate environment is a criminal offence, particularly when intended to mislead investors, customers, or authorities. The Financial Superintendence underscores the necessity of truthful, verifiable, and sufficient information to maintain trust in the financial system.

Colombian law contains robust provisions to address offences such as misappropriation of public funds, unlawful taking of interest, embezzlement, and favouritism by public officials. These offences are outlined in the Penal Code to safeguard the integrity of public administration and ensure the proper use of state resources.

Misappropriation of Public Funds

This occurs when a public official appropriates state assets, assets belonging to state-owned entities, or assets under their custody for personal gain or the benefit of a third party. Penalties include imprisonment for six to 15 years, fines equivalent to the misappropriated amount, and disqualification from public office for the same period.

Embezzlement of Public Funds

This offence involves the diversion or misuse of public funds by a public official. Penalties include significant prison terms, and extradition may apply in international cases.

Unlawful Taking of Interest

The unlawful taking of interest is committed when a public servant acts in their own interest or that of a third party, when involved in any contract or transaction in which they are required to participate by virtue of their position or duties. Penalties range from 5.5 to 18 years of imprisonment, accompanied by fines and disqualification from public office for an equivalent period.

Colombian law addresses offences committed through intermediaries, particularly in cases of bribery and corruption. Both individuals and legal entities can be held accountable. For example, transnational bribery involves individuals who directly or indirectly give, promise, or offer money, valuables, or other benefits to foreign public officials in exchange for actions, omissions, or delays related to their official duties in international transactions. While legal entities cannot face criminal charges, they can be held administratively liable, with sanctions including substantial fines and being barred from contracting with the state. Further measures may involve publicising the sanction in the media and on the company’s website to promote transparency and deter unethical conduct.

While lobbying itself is not a regulated activity, actions that fall within its general scope can be subject to sanctions. For instance, proposing or promoting any interest in the law-making process in exchange for a specific benefit could constitute bribery or influence peddling.

In Colombia, the statute of limitations corresponds to the maximum penalty stipulated by law for each offence, with a minimum of five years and a maximum of twenty. If the crime was initiated or completed abroad, this minimum extends to ten years.

From an administrative perspective, the Superintendence of Companies has a ten-year limitation period for transnational bribery offences, and a five-year limitation period for administrative investigations related to non-compliance with regulations for implementing compliance programmes.

Colombian criminal law has both territorial and extraterritorial reach, meaning its laws can apply to offences committed outside national territory under certain conditions.

Specifically, Colombian criminal law applies to Colombian nationals who commit crimes abroad, provided the offence carries a minimum prison sentence of at least two years and the individual has not been tried in the foreign jurisdiction. It also applies to offences committed abroad that threaten the existence or security of the state, the constitutional order, social and economic stability, public administration, or involve counterfeiting national currency or financing terrorism.

For administrative procedures concerning transnational bribery, the Superintendence of Companies has jurisdiction over conduct committed abroad, as long as the legal entity or branch of a foreign company allegedly responsible or benefiting from the conduct is domiciled in Colombia.

Finally, for administrative procedures related to the implementation of compliance programmes, the Superintendence of Companies has territorial reach.

Corporate liability exists within both administrative and civil jurisdictions in Colombia. While companies or entities cannot currently face criminal charges, both individuals and companies can be held liable for the same offence, provided that offence is recognised in both jurisdictions – criminally for the individual and administratively for the company. Law 1778 of 2016 establishes an administrative liability regime for legal entities that benefit from corrupt acts, such as transnational bribery. Sanctions under this law include fines, bans on receiving government incentives, and public disclosure of the sanctions. Law 1474 of 2011 (the Anti-Corruption Statute) also provides for administrative sanctions against companies benefiting from crimes committed by their employees or managers, such as bribery or embezzlement. This liability applies even if the company did not directly participate in the offence, as long as it gained some benefit from the illicit activity.

Regarding the liability of successor entities, Colombian legislation does not explicitly address their criminal liability for offences committed by the target entity before a merger or acquisition. However, in the administrative realm, liability may extend to successor entities if they benefit from illicit acts or if such acts were part of the merger or acquisition agreement.

Both individuals and legal entities can be held liable for the same offence, but through different mechanisms: individuals face criminal prosecution, while companies are subject to administrative sanctions. This dual liability system ensures accountability for both the perpetrator and the benefiting entity.

Under the Anti-Corruption Statute (Law 1474 of 2011), compliance with transparency and public management norms, such as access to information, proper adherence to regulations, and the implementation of appropriate compliance programmes, can form part of a defence strategy. Although the law does not explicitly outline specific legal defences, demonstrating adherence to these requirements may mitigate culpability.

There is no explicit information about exceptions to these defences for anti-corruption offences; however, the right to defend oneself or one’s company is a constitutional right and cannot be restricted.

No specific de minimis exceptions are identified for anti-corruption offences. Generally, such exceptions are not applicable due to the serious nature of corruption-related crimes, regardless of the scale. Therefore, each case must be analysed individually to determine whether, within the specific context and situation, corrupt conduct can be considered to have occurred.

There are no sector-specific exemptions for anti-corruption offences. The laws apply broadly to all public and private entities managing public resources or engaging in state contracts, ensuring uniform accountability across sectors.

Colombia does have a leniency programme available to companies or individuals involved in corruption and transnational bribery.

A leniency request can be submitted until the deadline for filing a defence brief in an administrative proceeding before the Division of Economic and Corporate Affairs of the Superintendence of Companies. If multiple companies are involved in the conduct, requests are prioritised based on the order in which they are received. This order also determines the extent of the benefits, which can range from partial reductions to full exoneration of fines.

Granting leniency results in the early termination of the administrative procedure for the company receiving it, although proceedings may continue against other involved companies.

In Colombia, penalties for anti-corruption offences apply to both individuals and legal entities. Individuals convicted of these crimes face imprisonment, fines, and disqualifications. For example, influence peddling by private individuals is punishable by four to eight years of imprisonment and fines ranging from 100 to 200 monthly minimum wages (COP130,000,000 or approximately USD30,000 to COP260,000,000 or approximately USD60,000).

Furthermore, under Law 1474 of 2011, individuals convicted of corruption-related offences are ineligible for penal benefits such as parole. Legal entities are subject to administrative sanctions under the same law, including fines and other measures if a manager or employee is convicted of corruption offences. Law 2195 of 2022 strengthens this regime by allowing legal entities to be held civilly liable as third parties in corruption investigations. Both individuals and companies may also face disqualifications from engaging in state contracts. Law 2014 of 2019 establishes stricter disqualifications to ensure that those convicted of corruption cannot participate in state contracts, extending these measures to companies controlled by individuals convicted of corruption. These penalties are comprehensive and aim to deter corruption while safeguarding public resources.

For transnational bribery activities, the Superintendence of Companies can impose fines of up to 200,000 minimum legal monthly wages (COP260,000,000,000 or approximately USD58 million). Failure to comply with the Superintendence of Companies’ regulations regarding the implementation of business transparency and ethics programmes may lead to penalties of up to COP260,000,000 (approximately USD58,000).

The assessment of penalties for anti-corruption offences in Colombia is guided by the Criminal Code, which specifies a range of penalties for each offence. For instance, misappropriation of public funds carries a prison sentence ranging from six to 15 years. The precise penalty imposed depends on various factors, including the severity of the situation, the extent of the impact, and the amount misappropriated. There are no minimum sentences applicable to all crimes; each is assessed individually based on its own specific penalty range.

Repeat offences are treated more severely, both when multiple offences are being judged simultaneously and when the individual has a prior criminal record. Both situations are considered aggravating factors that can lead to a higher sentence. Furthermore, the Criminal Code allows for penalties to be doubled in cases of aggravating circumstances or when offences are committed under specific conditions, further increasing the severity of punishment for repeat offenders.

From an administrative perspective, the assessment of penalties related to transnational bribery takes the following factors into account:

  • the economic benefit obtained or intended by the offender through their conduct;
  • the offender’s financial capacity;
  • repetition of the conduct;
  • resistance, refusal, or obstruction of investigative or supervisory actions and procedural conduct of the investigated party;
  • the use of intermediaries to conceal the infraction, the benefits obtained, or the money, goods, or services of economic value, or any benefit or utility offered or delivered to a national or foreign public official, or any of the effects of the infraction;
  • express acknowledgement or acceptance of the infraction before the acceptance of evidence;
  • the existence, implementation, and effectiveness of transparency and business ethics programmes or anti-corruption mechanisms within the company, as provided in Article 23 of the relevant law;
  • the degree of compliance with injunctions;
  • whether an adequate due diligence process was carried out prior to a merger, spin-off, reorganisation, or acquisition of control involving the company that committed the infringement; and
  • whether the company brought the commission of transnational bribery to the attention of the authorities.

Colombian regulations, specifically Law 1474 of 2011, require that individuals and companies disclose violations of anti-bribery and anti-corruption laws. Employees are required to report violations through company whistle-blower channels, which must guarantee anonymity and accessibility. Public officials, such as auditors, are legally obligated to report acts of corruption to the relevant authorities, and internal control officers must disclose irregularities to oversight agencies.

To incentivise voluntary disclosure, Colombian regulations stipulate that companies must conduct training sessions promoting the use of internal whistle-blower channels. Furthermore, companies are required to implement whistle-blower protection policies. The Superintendence of Industry and Commerce and the Secretariat of Transparency also provide whistle-blower channels for individuals to report bribery or transnational bribery activities.

There is no prescribed process for submitting such information or documentation. Each company is expected to implement its own procedure, ensuring confidentiality and protecting those providing the information.

Currently, there are no specific regulations in place outlining the measures that must be adopted to protect whistle-blowers in Colombia. However, a bill is currently being developed that aims to establish whistle-blower protection mechanisms. In the interim, companies required to implement a compliance programme must establish their own policies to protect whistle-blowers from potential retaliation due to their reports.

There are currently no incentives for whistle-blowers to report bribery or corruption.

Regarding enforcement trends, administratively, the Superintendence of Companies can impose penalties for failure to implement a business transparency and ethics programme.

Criminally, enforcement is carried out through the prohibition of conduct such as bribery and related corruption offences, with penalties such as imprisonment and fines imposed on individuals based on the severity and circumstances of the offence.

While public entities harmed by corruption can seek to hold companies civilly liable for damages through judicial processes, there is currently no specific civil enforcement of anti-bribery and anti-corruption laws in Colombia.

The enforcement body for corruption is the Attorney General’s Office. In cases of transnational bribery, the enforcement bodies are the Attorney General’s Office and the Superintendence of Companies (administrative enforcement). Additionally, the Comptroller General of the Republic (CGR) oversees fiscal management and monitors the use of public funds and assets by public or private entities. The CGR’s powers include auditing accounts, establishing fiscal responsibility, imposing financial sanctions, and enforcing coactive jurisdiction. The CGR collaborates with other entities during evidence collection in fiscal responsibility processes. This means the Attorney General’s Office deals with criminal matters, while other entities examine corporate liability. These bodies interact based on a principle of collaboration, but there is no specific legal mandate detailing how this collaboration must be conducted.

The Superintendence of Companies can only impose fines on Colombian entities. While it could theoretically attempt to enforce actions against foreign entities, in practice this enforcement would be very difficult to carry out.

As an administrative authority, the Superintendence of Companies has discretion in mitigating and aggravating penalties when enforcing the law. Specifically, when a sanction results from the non-implementation of a business transparency and ethics programme, penalties are determined considering the following aspects, as outlined in Law 1437 of 2011:

  • damage or danger caused to the protected legal interests;
  • economic benefit obtained by the offender for themselves or a third party;
  • recidivism (repeated commission of the infraction);
  • resistance, refusal, or obstruction of investigative or supervisory actions;
  • use of fraudulent means or an intermediary to conceal the infraction or its effects;
  • the degree of diligence exercised in fulfilling duties or applying relevant legal norms;
  • reluctance or contempt in complying with orders issued by the competent authority; and
  • acknowledgement or express acceptance of the infraction before the acceptance of evidence.

In April 2024, the Superintendence of Companies imposed a fine of COP422,436,199.52 (approximately USD95,000) on a Colombian entity for corrupt practices.

The Odebrecht case remains one of the most prominent corruption scandals in the country, involving systematic bribery and resulting in over 160 criminal processes and investigations, with sanctions including up to eight years of imprisonment.

The Comptroller General of the Republic reported sanctions totalling COP199,248,510 during the 2022–2023 period. These fines resulted from fiscal administrative sanctioning processes and targeted entities and individuals managing public resources, highlighting the scope of fiscal control efforts. On the criminal side, prison sentences ranging from eight to 12 years have been imposed.

Administratively, in 2023, the Superintendence of Companies imposed a fine of COP353,997,972 (approximately USD79,000) on a Colombian entity for failing to implement a business transparency and ethics programme as required by regulations. The Superintendence also imposed a record fine of COP8,327,607,489 (approximately USD1.8 million) for transnational bribery practices.

Law 2195 of 2022 empowers each regulator to define the requirements for implementing a business transparency and ethics programme for the entities they oversee. The Superintendence of Companies has stipulated that companies under its supervision meeting certain criteria must implement a business transparency and ethics programme that includes, at a minimum:

  • a procedure for identifying corruption (C) and transnational bribery (TB) risks;
  • a procedure for identifying C/TB risk factors and their segmentation through independent diagnostics;
  • a procedure for measuring and mitigating identified C/TB risks, along with an action plan to reduce residual risks within the company’s defined risk appetite;
  • regulations regarding the offering, promising, and delivery (giving and receiving) of gifts or benefits to or from third parties;
  • regulations concerning remuneration and commission payments to employees, associates, and contractors;
  • regulations governing the company’s expenses related to entertainment, food, lodging, and travel;
  • regulations regarding political contributions of any nature;
  • regulations concerning donations and charitable contributions;
  • regulations for updating the compliance policy and business transparency and ethics programme;
  • audit, control, and document retention systems;
  • defined responsibilities for employees exposed to C/TB risks (eg, treasury personnel) related to corruption prevention, and assigned functions to the board of directors or ultimate decision-making body, legal representative, compliance officer, and statutory auditor;
  • regulated implementation of sanctioning procedures;
  • established appropriate channels for confidential and secure reporting of suspicious activities related to C/TB risks, including regulations on the obligation to report, no-retaliation policies, and the applicable reporting procedure;
  • tools to ensure that contractors, employees, and associates have access to, understand, and are trained on the compliance policies and the business transparency and ethics programme, tailored to the company’s needs;
  • procedures for preserving documents related to international business or transactions;
  • established due diligence procedures;
  • identification of red flags;
  • established mechanisms to control and monitor the business transparency and ethics programme and compliance policies; and
  • appointment of a compliance officer who meets regulatory requirements.

Furthermore, the Administrative Department of the Presidency of the Republic issued Decree 1122 of 2024, regulating public transparency and ethics programmes. The development of these programmes should consider the following elements:

They must include, among other things: (i) due diligence measures; (ii) prevention, management, and administration of risks related to money laundering, terrorist financing, proliferation of weapons, and corruption; (iii) procedures for submitting reports to competent authorities (including suspicious transaction reports to the UIAF); (iv) whistle-blower channels; and (v) communication and training strategies for the public transparency and ethics programmes.

They must be accompanied by a matrix that allows the entity to manage its risks related to money laundering, terrorist financing, proliferation of weapons, and corruption.

The public transparency and ethics programme comprises two components: transversal and programmatic. These components will be developed through actions associated with a set of tools or instruments to facilitate implementation. The transversal component encompasses actions that ensure the integration of the public transparency and ethics programme into the institutional dynamics and organisational culture; the programmatic component comprises the institutional strategy for combating corruption.

In Colombia, the failure to prevent bribery is not directly classified as a criminal offence.

Enforcement bodies do not provide guidelines regarding expectations and/or best practices for compliance programmes. Compliance programmes must fulfil the requirements of the regulation.

Colombian regulation requires companies that meet certain criteria to appoint a compliance officer who will be in charge of the implementation and assessment of the compliance programme.

The enforcement of applicable legislation has not been assessed. However, the Superintendence of Companies has the power to review the compliance programmes implemented by companies under its supervision and surveillance to guarantee that they meet the regulatory requirements. In case of non-compliance, the Superintendence of Companies may impose fines of up to 200 minimum legal monthly wages (COP260,000,000 or approximately USD60,000).

From an administrative perspective, there are no changes likely to be made to applicable legislation of the enforcement body in the foreseeable future. Similarly, from a criminal perspective, no changes to the applicable legislation or the enforcement body are expected in the near future.

Baker McKenzie

Carrera 11 #79-35 Piso 9
Bogotá D.C.
Colombia

+57 601 634 1500

Natalia.isaza@bakermckenzie.com www.bakermckenzie.com
Author Business Card

Trends and Developments


Authors



Baker McKenzie is a leading global law firm. In Colombia, the firm’s five-person connected compliance team provides expert guidance to both local and international clients on a wide range of corporate compliance matters. Led by Carolina Pardo, a recognised authority with over 20 years of experience in the field, the team has expertise in internal investigations, the design and implementation of ABC and AML programmes, representation before regulators and authorities, as well as practical day-to-day advice. With a strong presence in key jurisdictions across Latin America, including Mexico and Brazil, as well as a global reach, the firm is uniquely positioned to collaborate with teams worldwide. This enables it to deliver advice that is not only consistent but also tailored to the complexities of multijurisdictional matters. The team’s experience spans a diverse range of industry sectors, such as technology, telecommunications, life sciences, and automotive, among many others.

In recent years, the anti-corruption regulatory landscape in Colombia has undergone significant transformation. Colombia has demonstrated its commitment to fighting corruption, a problem that has affected the social, economic and political environment for years. The government has implemented measures and intensified efforts to build a framework that not only sanctions corrupt practices but also incentivises the creation of a culture of transparency, ethics and accountability across industries.

As a result of these efforts, new regulations have emerged in Colombia that seek to adopt preventive measures aimed at ensuring that companies implement compliance programmes through which they identify the possible corruption risks they face on a daily basis, as well as establish policies to prevent the materialisation of such risks. This represents a shift in Colombian regulation from a purely governmental, reactive approach of post-hoc investigations and sanctions, to a proactive approach that emphasises internalisation by companies and individuals.

Similarly, in order to aid authorities, regulators and watchdogs in identifying acts of corruption more efficiently, Colombia has implemented measures so that the companies involved in this type of conduct can serve as whistle-blowers. Starting from the understanding that whistle-blowers are the main source for identifying, investigating and sanctioning corrupt practices, the protection of whistle-blowers is key. In 2023, a bill was submitted to the House of Representatives to establish measures protecting individuals who report corrupt practices in good faith. This bill, recognising the importance of access to information, aims to incentivise reporting by providing these protections. By safeguarding whistle-blowers, Colombia aims to create a safer environment for those who expose wrongdoing, thereby strengthening the overall anti-corruption framework.

This approach not only makes the detection of corrupt activities less costly from a government perspective, but also introduces a powerful deterrent: the “empty seat at the table” effect. This refers to the constant uncertainty among participants in a corrupt scheme as to whether an absent member has turned whistle-blower.

The foregoing provides a general overview of the actions taken by Colombian authorities, representing a significant step towards robust regulation focused on prevention rather than simply sanctioning corruption. These initiatives also reflect a broader strategy to embed anti-corruption principles within society, aiming to make ethical behaviour the norm, not the exception.

Building on this, we will now highlight specific recent initiatives in Colombia designed to internalise and distribute the cost of combating corruption, prevent corrupt practices, and ultimately protect whistle-blowers from retaliation, thereby incentivising them to come forward.

Public Transparency and Ethics Programmes

For about five years, transparency and ethics programmes were mandatory for entities under surveillance or inspection by the Superintendency of Companies. While government entities were already required to implement a comprehensive risk management system, it was only in 2024 that a corresponding transparency programme became mandatory. This programme must focus not only on preventing corruption risks but also on preventing money laundering, the financing of terrorism, and the financing of the proliferation of weapons of mass destruction.

The Administrative Department of the Presidency of the Republic issued Decree 1122 of 2024 (hereinafter the “Decree”) regulating Article 73 of Law 1474 of 2011, amended by Article 31 of Law 2195 of 2022, regarding the Public Transparency and Ethics Programme (El Programa de Transparencia y ética pública, PTEP).

According to the Decree, the PTEP must be implemented by national, departmental and municipal entities, regardless of their legal nature. Its purpose is to promote a culture of compliance across government levels and to identify, measure, control and monitor the risk of corruption in the development of their activities.

The PTEP must include, among other criteria:

  • due diligence measures;
  • prevention, management and administration of money laundering, terrorist financing, proliferation of weapons and corruption risks;
  • procedures for submitting reports to the competent authorities (including suspicious transaction reports to the Financial Information and Analysis Unit (UIAF);
  • whistle-blower channels; and
  • communication and training strategies for the PTEP.

In addition, the PTEP must be accompanied by a comprehensive and specific risk matrix that allows the entity to manage its money laundering, terrorist financing, financing of the proliferation of weapons and corruption risks.

The PTEP is structured around two key components: transversal and programmatic. The transversal component encompasses the actions that ensure the PTEP is integrated into the entity’s institutional dynamics and organisational culture. The programmatic component comprises the institutional strategy for preventing corruption.

Even though the Decree required national, departmental and municipal entities to implement a PTEP, it also recognised that some entities may have a comprehensive risk management system in place. Therefore, the PTEP is not designed to operate in isolation but rather to be integrated with this existing system to provide a stronger defence against corruption.

The creation and regulation of the PTEP represents a key part of the Colombian government’s ongoing efforts to prevent corruption and engage public entities in this fight. The focus of these programmes on government entities suggests that, in the coming years, the obligation to implement transparency programmes could be extended beyond the public sector, perhaps even to companies overseen by regulators other than the Superintendence of Companies.

Leniency Programmes

An additional measure implemented in Colombia is the leniency programme. The purpose of this programme is to provide competent authorities with additional support in identifying corrupt practices that are otherwise difficult and costly to uncover. As paper trails become less common and corruption schemes become increasingly sophisticated, leniency programmes offer a valuable tool for companies involved in corruption and transnational bribery, incentivising them to disclose information and co-operate with authorities.

According to Decree 390 of 2024, which regulates the applicable procedure, leniency ranges from partial reductions to full exoneration of potential administrative sanctions for corruption and transnational bribery. To benefit from the leniency programme, a company must provide relevant and useful information about the mechanics of the scheme and the benefits obtained. This information includes:

  • In case of transnational bribery:
    1. individuals involved in the conduct and their relationship to the company;
    2. the background and facts;
    3. the foreign public official bribed;
    4. the thing of value offered, promised or given;
    5. the purpose sought and obtained; and
    6. the benefit obtained.
  • In case of corruption, the information provided must make it possible to:
    1. identify any individual associated with the company with a criminal conviction or a collaboration agreement with the Attorney General’s Office;
    2. understand the background and facts;
    3. identify the benefit sought or received by the company; and
    4. verify how the company consented to or tolerated the conduct.

Applications to the leniency programme may be submitted to the Division of Economic and Corporate Affairs of the Superintendence of Companies (hereinafter the “Division”) at any time before the expiry of the term for filing a brief of defence in an administrative proceeding (ie, up to 30 business days after service of process of the decision to launch the investigation for transnational bribery and 15 business days for other conducts). In the case of a conduct involving two or more conspirators, the request submitted first shall be given priority. The order in which requests are received and the timeliness of co-operation are considered when determining the applicable reduction in sanctions.

Granting leniency results in the early termination of the administrative procedure for the recipient company, although the procedure may continue for other involved parties. Importantly, even if no sanction is imposed, the administrative liability of the leniency beneficiary may still be declared.

The leniency programme is poised to become a crucial mechanism for facilitating the identification and sanctioning of corrupt practices. It also serves to discourage corruption by destabilising schemes from within. The prospect of full exoneration for the first to come forward significantly reduces the incentive to remain part of a conspiracy. 

Protection of Whistle-Blowers

Given Colombia’s history and public order context, implementing whistle-blower protection policies has been a subject of local debate. To address concerns about potentially unfounded reports intended to harm third parties, the implemented policies focus on protecting only those who report in good faith.

Under applicable regulations, companies required to implement a transparency programme – and therefore possessing whistle-blower reporting channels for employees to report corrupt practices – must provide whistle-blower protection through policies designed to prevent retaliation. Such retaliation might include:

  • discrimination, unfavourable or unfair treatment;
  • personal injury;
  • threats of retaliation;
  • job downgrading or loss of promotion opportunities;
  • damage to property; and
  • coercion, intimidation or harassment of the complainant or his/her family members.

However, recognising that whistle-blowing extends beyond private settings, there is a need for stronger measures to facilitate and encourage reporting of alleged wrongdoing and to protect whistle-blowers and their families from potential retaliation that could jeopardise their physical safety, professional or employment stability, economic well-being, or psychosocial health. These measures will not only provide protection but also incentivise more citizens to report, improving the availability, timeliness, and accessibility of information.

In 2023, a bill that seeks to establish mechanisms to protect whistle-blowers and their families was submitted to the Chamber of Representatives; this bill is expected to be debated shortly. With the implementation of these mechanisms, good faith whistle-blowing should increase, making it easier to access information related to possible corrupt conduct. In the meantime, companies must continue to adopt internal mechanisms to protect whistle-blowers who, in good faith, report corrupt practices.

Conclusion

The recent regulatory developments in Colombia demonstrate a clear focus on identifying and preventing corrupt practices. The latest regulations and proposed legislation underscore Colombia's commitment to adopting tools and measures that improve access to information, prevent corruption, and protect individuals who, acting as good-faith whistle-blowers, provide crucial information to authorities investigating and sanctioning corruption-related crimes.

While this regulatory evolution requires significant adaptation and compliance efforts from entities and individuals, it also presents an opportunity to strengthen the Colombian legal system and establish more effective tools and mechanisms for preventing corruption. By embracing these measures, entities, individuals, and the government create an opportunity to improve the business environment, mitigate corruption, and avoid sanctions.

These measures, however, are not a panacea. Rather, they represent an initial step in ongoing regulatory development aimed at effectively protecting whistle-blowers, implementing further preventative measures against corruption across various economic sectors, and establishing additional mechanisms to facilitate the disclosure of information about corrupt activities.

In the meantime, it is crucial that entities implement appropriate measures to comply with current regulations, strengthen their commitment to fighting corruption, and cultivate a culture of ethics and transparency that extends beyond employees to top management, including boards of directors and ultimate decision-making bodies. This will not only prevent entities from becoming embroiled in corruption scandals but also help them maintain a positive market reputation.

Baker McKenzie

Carrera 11 #79-35 Piso 9
Bogotá D.C.
Colombia

+57 601 634 1500

Natalia.isaza@bakermckenzie.com www.bakermckenzie.com
Author Business Card

Law and Practice

Authors



Baker McKenzie is a leading global law firm. In Colombia, the firm’s five-person connected compliance team provides expert guidance to both local and international clients on a wide range of corporate compliance matters. Led by Carolina Pardo, a recognised authority with over 20 years of experience in the field, the team has expertise in internal investigations, the design and implementation of ABC and AML programmes, representation before regulators and authorities, as well as practical day-to-day advice. With a strong presence in key jurisdictions across Latin America, including Mexico and Brazil, as well as a global reach, the firm is well positioned to collaborate with teams worldwide. This enables it to deliver advice that is not only consistent but also tailored to the complexities of multijurisdictional matters. The team’s experience spans a diverse range of industry sectors, such as technology, telecommunications, life sciences, and automotive, among many others.

Trends and Developments

Authors



Baker McKenzie is a leading global law firm. In Colombia, the firm’s five-person connected compliance team provides expert guidance to both local and international clients on a wide range of corporate compliance matters. Led by Carolina Pardo, a recognised authority with over 20 years of experience in the field, the team has expertise in internal investigations, the design and implementation of ABC and AML programmes, representation before regulators and authorities, as well as practical day-to-day advice. With a strong presence in key jurisdictions across Latin America, including Mexico and Brazil, as well as a global reach, the firm is uniquely positioned to collaborate with teams worldwide. This enables it to deliver advice that is not only consistent but also tailored to the complexities of multijurisdictional matters. The team’s experience spans a diverse range of industry sectors, such as technology, telecommunications, life sciences, and automotive, among many others.

Compare law and practice by selecting locations and topic(s)

{{searchBoxHeader}}

Select Topic(s)

loading ...
{{topic.title}}

Please select at least one chapter and one topic to use the compare functionality.