Colombia
Colombia’s knowledge economy is modest. Consequently, it isn’t a major target of cyber-enabled IP theft, even though it’s still important for the government to be aware of and maintain defences against the threat of cyber-enabled crimes and IP theft.

Bogota, Colombia (36668708290) - 2017 CC 2.0 Pedro Szekely
Key Facts
R&D Investments
Patent Applications
Cybersecurity Agency
Colombia’s modest growth in its knowledge economy and recent efforts to bolster innovation, particularly in IP-intensive sectors such as chemicals and electronics, make it a potential target for economic cyber-espionage. However, the country’s limited investments in R&D, challenges in human-capital development and slow adoption of digital technologies across government and industry sectors make it a less likely target, placing it at a modest risk for such attacks.
To bolster its knowledge economy, the Colombian Government has recently taken several steps: the establishment of the Ministry of Science, Technology and Innovation in 2020 and the introduction of the National Policy on Science, Technology and Innovation 2022–2031, through which the government aims to invest 1% of GDP in R&D, primarily in the bioeconomy. However, those efforts are undermined by endemic challenges for Colombia in meeting human-capital needs, uncompetitive knowledge industries and limited investments in research funding. In 2021, Colombia invested approximately 3.3 billion Colombian pesos in R&D, which amounted to 0.28% of GDP, of which the private sector contributed 1.9 billion pesos. That’s below the Latin American regional average of 0.35%.
Colombia’s international partnerships, particularly with the US, the EU and China, enhance its economic profile but also expose it to modest risks of cyber-enabled IP theft due to the potential targeting of sensitive trade and technological information. The involvement of foreign entities, especially in key sectors such as telecommunications and infrastructure, increases its vulnerability. Colombia maintains close relations with the US, which is its largest trading partner and source of foreign investment. Meanwhile, Colombia’s ties with China have also expanded; it’s now Colombia’s second-largest export partner and largest source of imports. Chinese investments in telecommunications, infrastructure and technology have increased, more than 100 Chinese companies are operating in Colombia, and numerous tenders for major infrastructure projects have been won by Chinese firms. Scientific cooperation with foreign universities and institutes—including those in the US, the EU and China—has largely concentrated on research in vital innovative sectors, including biotechnology, renewable energy, agriculture and creative industries.
The foundations of Colombia’s capacity to combat the threat of cyber-enabled IP theft lie in existing IP and cybersecurity legislation and enforcement mechanisms. Colombia has various IP-relevant regulations and legislation, including the Political Constitution and the Criminal Code. Both contain guarantees of IP rights. However, the enforcement of IP rights remains weak, and infringements commonly occur without opportunities for recourse for victims.
Colombia has initiated a series of institutional and legal measures to empower the state’s ability to combat cyber-enabled crimes, such as the Policy Guidelines on Cybersecurity and Cyber Defence, the establishment of a CERT, and the Cybernetic Police Centre. Other policies, such as the 2018 Digital Government Policy and 2020 National Policy on Digital Trust and Security, aimed to strengthen digital security capabilities and governance. But, in practice, law-enforcement entities struggle to clamp down on cybercrime due to human-resource constraints (manpower, skills and expertise) and an unclear cyber governance landscape.
Colombia has multiple institutions overseeing cybersecurity, including the Presidential Advisor for Economic Matters and Digital Transformation and the Ministry of Information and Communication Technologies. However, the country lacks effective cybersecurity coordination, resulting in policy fragmentation. In the light of those limitations, the government has used international relationships for capacity building and in the search for standards. Colombia participates in international cyber-defence exercises and has acceded to the Budapest Convention on Cybercrime. The country is also home to the Digital Alliance between the EU, Latin America and the Caribbean, aimed at fostering safe digital infrastructures and democratic environments. Those engagements don’t focus specifically on cyber-enabled IP theft but provide the government with needed capacity-building and information-sharing opportunities to build defences against that threat.