How to create a national database registry?
Posted: Thu Jan 23, 2025 9:19 am
Many people still wonder how to carry out the national database registry or RNBD. To resolve this concern, it is important to know the basics about the aforementioned registry. Let's start by answering the two most common questions:
What is the RNBD?
It is the public directory of the databases with personal information subject to processing that operate in the country. The above does not imply that any database is stored there, only the information on how many databases there are, their purpose, the channels that have been arranged to address citizens' requests, the privacy policies adopted, the type of data they contain, the measures implemented to guarantee the security of the records and the transfers and transmissions carried out, when applicable. This registry operates not only in Colombia, it also exists in other countries such as Spain, Peru, Argentina and Uruguay (Extracted from what is defined by the Superintendence of Industry and Commerce)
What is the RNBD for?
To understand the reality of the country's ios database databases, the number of owners and types of data processed, who is processing them, the purpose and policies of processing and the channels or mechanisms available to receive queries, requests and complaints, among other aspects. Its main purpose is to raise awareness about the proper management of personal information contained in databases. (Taken from what was defined by the Superintendency of Industry and Commerce)
Once these two questions have been answered, let's move on to answering the question that has surely brought you to this article: "How to carry out the national database registry or RNBD?". Carrying out the registration is a literally simple task as long as you have prepared yourself correctly to do so, so below we mention three basic points to take into account before carrying out the registration.
Knowing the help available : there is currently official documentation from the Superintendence of Industry and Commerce (SIC) which you can find in video or documentary form through the user manual. You can also use other tutorials or additional information available on the Internet.
Understanding the RNBD as a requirement : It is very important that you as the responsible party understand that the RNBD is only one of the requirements for regulatory compliance and that registration is not the only thing you must comply with.
Preparing for registration : Before entering the database registration platform provided by the SIC, you must at least prepare or define the following information, in order to have answers to the questions that you will find within the registry.
Identify the legal function of the entity
Defining the needs and purposes of data collection
Identify those in charge (External parties who have been entrusted with data processing)
Identify a time limit for the processing of personal data
Identify the number of holders for which you may have information
Have customer service channels for the owners, as well as a responsible person
Have a data protection policy aligned with its legal function, needs and purposes
Develop a regulation, guide, practices or guidelines for data processing security
Describe databases containing personal information
Finally, it is crucial that you, as the person responsible, seek specialized external advice if you are not completely sure of the compliance requirements. Remember that not only can non-compliance with the standard generate economic and operational sanctions for your company, but also inadequate compliance with it.
What is the RNBD?
It is the public directory of the databases with personal information subject to processing that operate in the country. The above does not imply that any database is stored there, only the information on how many databases there are, their purpose, the channels that have been arranged to address citizens' requests, the privacy policies adopted, the type of data they contain, the measures implemented to guarantee the security of the records and the transfers and transmissions carried out, when applicable. This registry operates not only in Colombia, it also exists in other countries such as Spain, Peru, Argentina and Uruguay (Extracted from what is defined by the Superintendence of Industry and Commerce)
What is the RNBD for?
To understand the reality of the country's ios database databases, the number of owners and types of data processed, who is processing them, the purpose and policies of processing and the channels or mechanisms available to receive queries, requests and complaints, among other aspects. Its main purpose is to raise awareness about the proper management of personal information contained in databases. (Taken from what was defined by the Superintendency of Industry and Commerce)
Once these two questions have been answered, let's move on to answering the question that has surely brought you to this article: "How to carry out the national database registry or RNBD?". Carrying out the registration is a literally simple task as long as you have prepared yourself correctly to do so, so below we mention three basic points to take into account before carrying out the registration.
Knowing the help available : there is currently official documentation from the Superintendence of Industry and Commerce (SIC) which you can find in video or documentary form through the user manual. You can also use other tutorials or additional information available on the Internet.
Understanding the RNBD as a requirement : It is very important that you as the responsible party understand that the RNBD is only one of the requirements for regulatory compliance and that registration is not the only thing you must comply with.
Preparing for registration : Before entering the database registration platform provided by the SIC, you must at least prepare or define the following information, in order to have answers to the questions that you will find within the registry.
Identify the legal function of the entity
Defining the needs and purposes of data collection
Identify those in charge (External parties who have been entrusted with data processing)
Identify a time limit for the processing of personal data
Identify the number of holders for which you may have information
Have customer service channels for the owners, as well as a responsible person
Have a data protection policy aligned with its legal function, needs and purposes
Develop a regulation, guide, practices or guidelines for data processing security
Describe databases containing personal information
Finally, it is crucial that you, as the person responsible, seek specialized external advice if you are not completely sure of the compliance requirements. Remember that not only can non-compliance with the standard generate economic and operational sanctions for your company, but also inadequate compliance with it.