Key points
- Law 1581 of 2012 treats health data as sensitive and requires the patient's explicit authorisation to process it, with the Superintendencia de Industria y Comercio as the data protection authority.12
- Law 2015 of 2020 obliges health providers to place clinical history data on the national interoperability platform, while each provider keeps custody of its own records.3
- A Bogotá health observatory list drawn from the national provider register on 14 October 2026 counts 2,605 sites registered for plastic surgery and related specialist services, 2,485 of them private.6
- Between 2018 and 2026 Bogotá's ageing index rose from 63 to 91 people aged 65 and over for every 100 children under 14.5
Summary
A Bogotá clinic can use AI for notes and patient messages in 2026 once each patient has given explicit authorisation for their health data, and with a clinician signing every note. Law 2015 of 2020 adds the national interoperable clinical history, which providers feed while keeping custody of their own records.
In Bogotá the patient who writes on WhatsApp after dinner about a consultation now has an approved reply and a time with the specialist by breakfast, and the surgeon signs a complete note before the next patient. Colombian law sets clear terms for that work, from Law 1581 on personal data to Law 2015 on the interoperable clinical history.
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoWatch a WhatsApp message sent from Usaquén at 9:15pm become an approved reply and a booked consultation, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to check | How wai meets it |
|---|---|---|---|
| Law 1581 of 2012, articles 5 and 6 | Health data is sensitive and needs the patient's explicit authorisation | Where each authorisation is stored | Each patient's messages and approvals sit in one thread with full history |
| Law 1581 of 2012, article 9 | Prior, informed authorisation that can be consulted later | Can the clinic produce it on request | Every message, draft and approval is logged and exportable |
| Law 1581 of 2012, article 26 | No transfers to countries without adequate protection | Which country holds every copy | Records hosted in Colombia, set up with the clinic |
| Superintendencia de Industria y Comercio | Supervises personal data processing | Who answers a SIC enquiry for the clinic | Subprocessors named with thirty days notice |
| Law 2015 of 2020, articles 3 and 5 | Providers feed the IHCE platform and keep custody of their own records | Which data the platform will receive | wai is built to connect to the IHCE |
| Ministry of Health and Social Protection | Sets the terms of clinical history interoperability | Which ministry deadlines apply to the clinic | Every note stays a draft until the clinician signs it |
The private care market in Bogotá
Bogotá's health observatory publishes a list, drawn from the national register of health providers (REPS) and cut on 14 October 2026, of sites registered for plastic and aesthetic surgery, oncological plastic surgery and related specialist consultations.6 It counts 2,605 sites, of which 2,485 are private, 119 public and one mixed.6 The list runs from large clinics to independent professionals practising from a single consulting room.6
The city is also getting older. According to the observatory, using DANE projections updated in 2025 with the District Planning Secretariat, the share of people aged 65 and over rose from 13 to 16 in every 100 between 2018 and 2026, and the ageing index from 63 to 91.5
The rules a Bogotá clinic works under
Law 1581 of 2012 is Colombia's general data protection law. Article 5 lists data relating to health among sensitive data, and article 6 prohibits processing sensitive data unless the patient has given explicit authorisation, apart from the cases the law sets out.1 Article 9 requires prior, informed authorisation obtained by a means that can be consulted later, and article 10 waives it in cases of medical or health emergency.1
Article 19 makes the Superintendencia de Industria y Comercio, through its delegate for personal data protection, the authority that supervises how personal data is processed.12 Article 26 prohibits transfers to countries without adequate protection, with an exception for medical data exchanges that the patient's treatment requires.1
Law 2015 of 2020 created the interoperable electronic clinical history, known as IHCE.3 Article 3 obliges health service providers to place clinical history data, documents and files on the interoperability platform the national government provides, under terms set by the Ministry of Health and Social Protection.34 Article 5 keeps every provider, public or private, responsible for the custody of its patients' records in its own systems, and article 6 makes each person the owner of their electronic clinical history.3
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in Bogotá. The clinic can export a log of every message, draft, approval and signature, and gets thirty days notice before any named subprocessor changes.8
wai is built to connect to Colombia's interoperable electronic clinical history (IHCE). We set up your clinic's connection with you.
The languages Bogotá patients write in
Article 10 of the Colombian Constitution makes Spanish the official language of Colombia, and the languages of ethnic groups are also official in their own territories.7
wai works in any language, and a patient can answer the intake questions by voice in Spanish or any other language.9 Every reply is drafted in the language the patient used, and a person at the clinic approves it before it is sent.
What a demo shows in Bogotá
The demo opens on a WhatsApp message sent at 9:15pm from Usaquén. A woman asks whether she can see the plastic surgeon for a first consultation next week, and whether her sister can come in the same afternoon. wai reads the surgeon's busy times from Google Calendar, Outlook or Apple Calendar and drafts a reply in Spanish offering two adjoining open times. The coordinator approves it at 7:30am.
Before approving, the coordinator adds the clinic's data processing authorisation, so explicit consent for her health data is on file before she arrives, as article 6 of Law 1581 requires.1 Reminders go out before the visit, and if she cancels, the time is offered to the waitlist.
In the consultation wai drafts the note and the surgeon reviews and signs it. Codes come from the signed note and the claim is prepared for the patient's insurer, ready for the team to check. Bring a week of real WhatsApp enquiries and missed calls and watch each one drafted.
For hospital groups, insurers and the district in Bogotá
Hospital groups, insurers and public bodies in Bogotá can have wai build a system for one care pathway, designed around how the IHCE platform receives clinical data. The organisation owns what is built, with data and model rights agreed in the contract, as the organisations page describes.
Where to start
First, write an authorisation for health data and for recording consultations with AI, keep it in a form you can produce later, and send it with each new patient's first reply.1 The consent form template gives a base to adapt into Spanish.
Second, map which of your clinical history data the IHCE platform will receive and who in the clinic answers for custody of the records.3 Third, export a week of WhatsApp enquiries and mark the ones that arrived after closing, then bring them to a fifteen-minute demo.
Bring a week of WhatsApp enquiries from Bogotá patients and watch each one drafted for your team to approve.
Frequently asked questions
Does a Bogotá clinic need patient authorisation to use an AI scribe?
Health data is sensitive under Law 1581, and processing it needs the patient's explicit authorisation, outside the exceptions the law lists.1 Recording the consultation for an AI note belongs in that authorisation.
Who enforces data protection for clinics in Colombia?
Do private clinics have to join the interoperable clinical history?
Law 2015 of 2020 obliges health service providers to place clinical history data on the national interoperability platform, on terms set by the Ministry of Health and Social Protection.3
Who keeps custody of the records once the IHCE is in place?
Each provider, public or private, stays responsible for the custody of its patients' records in its own systems, under article 5 of Law 2015.3
Can a Bogotá clinic's data be stored abroad?
Article 26 of Law 1581 prohibits transfers to countries without adequate protection, with listed exceptions.1 wai keeps a Bogotá clinic's records in Colombia.
Does wai reply to patients on its own?
No. wai drafts each reply in the patient's language and a person at the clinic approves it before it is sent, and the clinician signs every note.9
Sources
- 1Función Pública, Gobierno de Colombia, 2012Ley 1581 de 2012, por la cual se dictan disposiciones generales para la protección de datos personalesRead 15 October 2026Read source
- 2Superintendencia de Industria y Comercio, 2026Superintendencia de Industria y ComercioRead 15 October 2026Read source
- 3Secretaría General del Senado de la República, 2020Ley 2015 de 2020, por medio de la cual se crea la Historia Clínica Electrónica InteroperableRead 15 October 2026Read source
- 4Ministerio de Salud y Protección Social, 2026Ministerio de Salud y Protección SocialRead 15 October 2026Read source
- 5Observatorio de Salud de Bogotá, Secretaría Distrital de Salud, 2026Población de Bogotá D.C. 2005 a 2035Read 15 October 2026Read source
- 6Observatorio de Salud de Bogotá, Secretaría Distrital de Salud, 2026Listado de especialistas e IPS habilitados, cirugía plástica y estética (REPS, corte 14 de octubre de 2026)Read 15 October 2026Read source
- 7Secretaría General del Senado de la República, 1991Constitución Política de Colombia 1991, artículo 10Read 15 October 2026Read source
- 8wai, 2026Security and trustRead 15 October 2026Read source
- 9wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
Every Bogotá enquiry answered by breakfast, with the patient's authorisation on file and the note signed.
Fifteen minutes with a clinician who uses wai daily, on your own WhatsApp enquiries. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

