Análisis de las practicas actuales de las Fintechs colombianas para el tratamiento de datos sensible
Cargando...
Fecha
2026
Autores
Sánchez González, Idalvis Patricia
Jiménez Mancilla, Lorena Patricia
Niebles Racedo, Nadia
Título de la revista
ISSN de la revista
Título del volumen
Editor
Ediciones Universidad Simón Bolívar
Facultad de Administración y Negocios
Facultad de Administración y Negocios
Resumen
La transformación digital del sistema financiero ha impulsado el crecimiento del ecosistema Fintech en Colombia, generando nuevas oportunidades para la inclusión financiera, la innovación tecnológica y la eficiencia operativa. Sin embargo, este proceso también ha incrementado la relevancia del tratamiento adecuado de los datos personales, particularmente de los datos sensibles, los cuales constituyen un insumo fundamental para modelos de negocio basados en analítica de datos, automatización de decisiones y evaluación de riesgos crediticios.
El objetivo de esta investigación es analizar las prácticas implementadas por las Fintech colombianas en el tratamiento de datos sensibles, con el fin de identificar sus principales características, el grado de alineación con la normativa vigente y las oportunidades de mejora en la gestión de esta información. Metodológicamente, el estudio se desarrolló bajo un enfoque cualitativo con diseño documental y alcance descriptivo-analítico. La información fue recopilada mediante la revisión sistemática de políticas de privacidad, documentos institucionales y marcos regulatorios nacionales e internacionales.
La muestra estuvo conformada por ocho Fintech representativas del ecosistema colombiano: Addi, Nequi, Lulo Bank, Movii, RappiPay, Puntored, Nu Colombia y DaviPlata. Los resultados evidencian un cumplimiento formal generalizado de la normativa nacional, particularmente de la Ley 1581 de 2012. No obstante, se identifican brechas en la adopción de certificaciones internacionales y mecanismos verificables de auditoría y transparencia. Se concluye que fortalecer la gobernanza de datos y la implementación de estándares internacionales puede contribuir a consolidar la confianza digital, mejorar la gestión del riesgo y fortalecer la sostenibilidad del ecosistema Fintech colombiano.
The digital transformation of the financial system has driven the rapid growth of the Fintech ecosystem in Colombia, creating new opportunities for financial inclusion, technological innovation, and operational efficiency. However, this process has also increased the importance of the proper management of personal information, particularly sensitive data, which has become a key resource for business models based on data analytics, automated decision-making, and credit risk assessment. The objective of this research is to analyze the practices implemented by Colombian Fintech companies regarding the treatment of sensitive data, in order to identify their main characteristics, their level of alignment with current regulations, and potential areas for improvement in data governance. Methodologically, the study was conducted using a qualitative approach with a documentary design and a descriptive–analytical scope. Data were collected through a systematic review of privacy policies, institutional documents, and national and international regulatory frameworks. The sample included eight representative Fintech companies operating in Colombia: Addi, Nequi, Lulo Bank, Movii, RappiPay, Puntored, Nu Colombia, and DaviPlata. The results reveal a general formal compliance with national data protection regulations, particularly Law 1581 of 2012. Nevertheless, significant gaps remain in the adoption of international certifications and verifiable mechanisms of transparency and external auditing. The study concludes that strengthening data governance and implementing international standards could enhance digital trust, improve risk management, and support the long-term sustainability of the Colombian Fintech ecosystem.
The digital transformation of the financial system has driven the rapid growth of the Fintech ecosystem in Colombia, creating new opportunities for financial inclusion, technological innovation, and operational efficiency. However, this process has also increased the importance of the proper management of personal information, particularly sensitive data, which has become a key resource for business models based on data analytics, automated decision-making, and credit risk assessment. The objective of this research is to analyze the practices implemented by Colombian Fintech companies regarding the treatment of sensitive data, in order to identify their main characteristics, their level of alignment with current regulations, and potential areas for improvement in data governance. Methodologically, the study was conducted using a qualitative approach with a documentary design and a descriptive–analytical scope. Data were collected through a systematic review of privacy policies, institutional documents, and national and international regulatory frameworks. The sample included eight representative Fintech companies operating in Colombia: Addi, Nequi, Lulo Bank, Movii, RappiPay, Puntored, Nu Colombia, and DaviPlata. The results reveal a general formal compliance with national data protection regulations, particularly Law 1581 of 2012. Nevertheless, significant gaps remain in the adoption of international certifications and verifiable mechanisms of transparency and external auditing. The study concludes that strengthening data governance and implementing international standards could enhance digital trust, improve risk management, and support the long-term sustainability of the Colombian Fintech ecosystem.
Descripción
Tabla de contenidos
Palabras clave
Fintech colombianas, Datos sensibles, Protección de datos personales, Gobernanza de datos, Ciberseguridad, Cumplimiento normativo, Transformación digital, Innovación financiera, Privacidad de la información, Seguridad digital
