@alisio/plugin-thesis 0.1.0

package/policy-packs/countries/CO/domains/health/resolucion-8430-1993.yaml

@@ -0,0 +1,219 @@
+# Resolución 8430 de 1993 (MinSalud) — scientific, technical and administrative norms for
+# health research. In force with no recorded modifications (SuperSalud compilation, 2026-10-04).
+# Scope (art. 1): "la actividad investigativa en salud". Many universities apply it by analogy to
+# research with people in other fields; that is institutional practice, so rules here apply only
+# when domain is health unless an institutional rule extends them.
+# WATCH: a MinSalud draft resolution (second public consultation, reported 2026-07-30) would repeal
+# Títulos I and II and reportedly reduce the risk categories to two. Not issued as of 2026-10-04.
+rules:
+  - ruleId: CO.MINSALUD.R8430.1993.ETHICS_COMMITTEE.02
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: human_participants }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: human_participants
+        requires:
+          - CO.MINSALUD.R8430.1993.RISK_CLASSIFICATION.11
+          - CO.MINSALUD.R8430.1993.APPROVALS.06G
+          - CO.MINSALUD.R8430.1993.CONSENT.14_16
+        evidence: ethics_committee_approval_in_annexes
+        quote: "Las instituciones que vayan a realizar investigación en humanos, deberán tener un Comité de Etica en Investigación"
+    source:
+      reference: "Resolución 8430 de 1993, art. 2"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.APPROVALS.06G
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: human_participants }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: human_participants
+        approvals: [researcher_institution_legal_representative, research_site_institution, participant_informed_consent, ethics_committee]
+        mustStateRisks: true
+        quote: "autorización: del representante legal de la institución investigadora y de la institución donde se realice la investigación; el Consentimiento Informado de los participantes; y la aprobación del proyecto por parte del Comité de Etica"
+    source:
+      reference: "Resolución 8430 de 1993, art. 6 lit. d, e, g"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.RISK_CLASSIFICATION.11
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: human_participants }
+    requirement:
+      kind: risk_classification
+      values:
+        categories:
+          - id: sin_riesgo
+            definition: "técnicas y métodos de investigación documental restrospectivos y aquellos en los que no se realiza ninguna intervención o modificación intencionada de las variables biológicas, fisiológicas, sicológicas o sociales"
+            condition: "interviews and questionnaires qualify only when participants are not identified and sensitive aspects of conduct are not addressed"
+          - id: riesgo_minimo
+            definition: "estudios prospectivos que emplean el registro de datos a través de procedimientos comunes … pruebas sicológicas a grupos o individuos en los que no se manipulará la conducta del sujeto"
+          - id: riesgo_mayor_que_el_minimo
+            definition: "aquellas en que las probabilidades de afectar al sujeto son significativas"
+            examples: [radiology, new_drugs_or_devices, surgery, invasive_procedures, random_allocation, placebo_control]
+        escalateWhen: [identifiable_personal_data, sensitive_data]
+        aboveMinimalTrigger: risk_above_minimal
+    source:
+      reference: "Resolución 8430 de 1993, art. 11 lit. a, b, c"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.CONSENT.14_16
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: human_participants }
+    requirement:
+      kind: consent_requirement
+      values:
+        form: written
+        elements: [justification_and_objectives, procedures, expected_risks, expected_benefits, alternative_procedures, right_to_ask_questions, right_to_withdraw, confidentiality, new_information_commitment, treatment_and_compensation, additional_costs]
+        validity: [drafted_by_principal_investigator, reviewed_by_ethics_committee, two_witnesses_named, signed_by_subject_and_two_witnesses, made_in_duplicate]
+        waiverDecidedBy: ethics_committee
+        waivers:
+          riesgo_minimo: committee_may_allow_non_written_consent
+          sin_riesgo: committee_may_waive_consent
+        dependentParticipants: consent_obtained_by_independent_team_member
+        quote: "En el caso de investigaciones con riesgo mínimo, el Comité … podrá autorizar que el Consentimiento Informado se obtenga sin formularse por escrito y tratándose de investigaciones sin riesgo, podrá dispensar al investigador de la obtención del mismo."
+    source:
+      reference: "Resolución 8430 de 1993, arts. 14, 15 lit. a–k, 16 and parágrafos 1–2"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.PRIVACY.08
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: data_protection
+      values:
+        identification: only_when_results_require_and_subject_authorizes
+        default: pseudonymize
+        quote: "se protegerá la privacidad del individuo, sujeto de investigación, identificándolo solo cuando los resultados lo requieran y éste lo autorice."
+    source:
+      reference: "Resolución 8430 de 1993, art. 8"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.COMMUNITIES.17_18
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: communities }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: communities
+        approvals: [community_health_authorities, community_civil_authorities, individual_informed_consent]
+        quote: "el investigador principal deberá obtener la aprobación de las autoridades de salud y de otras autoridades civiles de la comunidad a estudiar, además de obtener la carta de Consentimiento Informado de los individuos"
+    source:
+      reference: "Resolución 8430 de 1993, arts. 17–18"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.MINORS.23_26
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: minors }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: minors
+        requires: [prior_similar_studies_in_adults_and_immature_animals_unless_age_specific_condition, consent_of_parent_or_legal_representative, capacity_certification_by_neurologist_psychiatrist_or_psychologist, child_assent_when_capacity_allows]
+        quote: "aquella que se realice en menores de edad o en discapacitados físicos y mentales, deberá satisfacer plenamente todas las exigencias que se establecen en este capítulo."
+        note: "Arts. 27–32 were not read in full (open question)."
+    source:
+      reference: "Resolución 8430 de 1993, arts. 23–26"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.BIOLOGICAL.47
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: biological_samples }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: biological_samples
+        appliesTo: [human_organs, tissues, derivatives, products, cadavers]
+        quote: "comprende la que incluye la utilización de órganos, tejidos y sus derivados, productos y cadáveres de seres humanos"
+    source:
+      reference: "Resolución 8430 de 1993, art. 47 (Título II, Capítulo VI)"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.CLINICAL.49
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: clinical_research }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: clinical_research
+        appliesTo: [new_prophylactic_diagnostic_therapeutic_or_rehabilitation_resources]
+        requires: [ethics_committee_approval, CO.MINSALUD.R8430.1993.CONSENT.14_16]
+        quote: "Cuando se realice investigación en seres humanos, sobre nuevos recursos profilácticos, de diagnóstico, terapéuticos y de rehabilitación … deberá … satisfacer lo contemplado en este título."
+    source:
+      reference: "Resolución 8430 de 1993, arts. 49–50 (Título III)"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.MINSALUD.R8430.1993.ANIMALS.87_89
+    level: REGULATION
+    authority: { organization: Ministerio de Salud de Colombia }
+    document: { id: RES-8430-1993, version: "1993" }
+    status: active
+    appliesWhen: { country: CO, domain: health, ethicsTrigger: animals }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: animals
+        requires: [comply_with_ley_84_de_1989, prefer_alternatives_models_simulation_in_vitro, justify_contribution_to_knowledge, minimum_number_of_animals, apply_3rs_replacement_reduction_refinement]
+        quote: "se sigue el principio de Russell Burch '3R', remplazo, reducción y refinamiento."
+        note: "Scope follows art. 1 (health research). Outside health, Ley 84 de 1989 and institutional animal-ethics rules apply; not encoded here (open question)."
+    source:
+      reference: "Resolución 8430 de 1993, arts. 87–89 (Título V)"
+      url: "https://www.minsalud.gov.co/sites/rid/Lists/BibliotecaDigital/RIDE/DE/DIJ/RESOLUCION-8430-DE-1993.PDF"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []

package/policy-packs/countries/CO/higher-education/ley-30-1992.yaml

@@ -0,0 +1,61 @@
+# Ley 30 de 1992 — public higher education service (university autonomy).
+# Effect on the resolver (spec §11.3): national law sets no thesis format; institution,
+# faculty and program rules govern presentation, citation style and degree requirements.
+rules:
+  - ruleId: CO.LEY30.1992.AUTONOMY.28
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-30-1992, version: "1992" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: institutional_authority
+      values:
+        scope: [statutes, academic_programs, degree_requirements]
+        effect: institution_rules_govern_thesis_requirements
+        quote: "reconoce a las universidades el derecho a darse y modificar sus estatutos, … crear, organizar y desarrollar sus programas académicos, … otorgar los títulos correspondientes"
+    source:
+      reference: "Ley 30 de 1992, art. 28"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=253"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY30.1992.AUTONOMY.29
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-30-1992, version: "1992" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: institutional_authority
+      values:
+        scope: [academic_programs, formative_activities, student_regime]
+        effect: institution_rules_govern_thesis_requirements
+        appliesTo: [instituciones_universitarias, escuelas_tecnologicas, instituciones_tecnicas_profesionales]
+        quote: "c. Crear, desarrollar sus programas académicos, lo mismo que expedir los correspondientes títulos; d. Definir y organizar sus labores formativas, académicas…; f. Adoptar el régimen de alumnos y docentes"
+    source:
+      reference: "Ley 30 de 1992, art. 29 lit. c, d, f"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=253"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY30.1992.STUDENT_REGULATIONS.109
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-30-1992, version: "1992" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: institutional_authority
+      values:
+        scope: [student_regulations]
+        effect: ask_for_reglamento_estudiantil_and_program_thesis_guidelines
+        quote: "deberán tener un reglamento estudiantil que regule al menos … régimen disciplinario y demás aspectos académicos."
+    source:
+      reference: "Ley 30 de 1992, art. 109"
+      url: "http://www.secretariasenado.gov.co/senado/basedoc/ley_0030_1992.html"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []

package/policy-packs/countries/CO/manifest.yaml

@@ -0,0 +1,42 @@
+# Colombia (CO) policy pack manifest. Manifest format: spec §11.1.1.
+packId: CO
+scope: country
+country: CO
+version: "2026.10.04"
+lastChecked: "2026-10-04"
+extends: global
+languages: [es]
+files:
+  - higher-education/ley-30-1992.yaml
+  - academic-standards/ntc-1486-2022.yaml
+  - research-integrity/minciencias-res-0314-2018.yaml
+  - copyright/ley-23-1982.yaml
+  - copyright/ley-1915-2018.yaml
+  - copyright/decision-andina-351.yaml
+  - privacy/ley-1581-2012.yaml
+  - domains/health/resolucion-8430-1993.yaml
+  - official-domains.yaml
+defaults:
+  # Colombia never auto-enables ICONTEC (spec §11.3): no national rule imposes a presentation
+  # standard or citation style; Ley 30 de 1992 arts. 28–29 leave it to the institution.
+  presentationStandard: null
+  citationStyle: null
+  askInRound2: [citationStyle, presentationStandard, institution]
+availableStandards: [icontec-ntc1486-2022]
+ethicsTriggers:          # questionnaire ids answered yes/no (spec §11.4); `minors` is proposed here
+  - human_participants
+  - identifiable_personal_data
+  - sensitive_data
+  - intervention
+  - risk_above_minimal
+  - biological_samples
+  - animals
+  - communities
+  - clinical_research
+  - minors
+  - additional_institutional_rules
+domains:
+  health: domains/health/
+watchList:
+  - id: minsalud-draft-replacing-res-8430-titles-I-II
+    note: "Draft resolution in second public consultation (reported 2026-07-30); would repeal Res. 8430 Títulos I–II. Re-check before each release."

package/policy-packs/countries/CO/official-domains.yaml

@@ -0,0 +1,90 @@
+# Allowlist used by research/verify.ts (spec §8.4) to grant VERIFIED_PRIMARY.
+# Matching is host-suffix based and offline: a URL host matches an entry when it equals the
+# entry or ends with "." + entry. Reachability is NOT a verification criterion: on 2026-10-04
+# several hosts below (funcionpublica.gov.co, suin-juriscol.gov.co, sic.gov.co) served an
+# incomplete TLS chain and failed Node 22 fetch with UNABLE_TO_VERIFY_LEAF_SIGNATURE.
+rules:
+  - ruleId: CO.DOMAINS.OFFICIAL.PRIMARY.01
+    level: RECOMMENDATION
+    authority: { organization: alisio-plugin-thesis }
+    document: { id: CO-OFFICIAL-DOMAINS, version: "2026-10-04" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: official_domain_allowlist
+      values:
+        tier: primary
+        hostSuffixes:
+          - gov.co                      # Colombian State second-level domain (all public entities)
+        explicitHosts:                  # members of gov.co listed for traceability (reachable 2026-10-04)
+          - funcionpublica.gov.co       # Gestor Normativo (consolidated laws)
+          - suin-juriscol.gov.co        # Ministry of Justice consolidated legal information system
+          - secretariasenado.gov.co     # Senate consolidated legal base (HTTP only; HTTPS timed out)
+          - corteconstitucional.gov.co
+          - consejodeestado.gov.co
+          - cortesuprema.gov.co
+          - minciencias.gov.co
+          - mineducacion.gov.co
+          - minsalud.gov.co
+          - derechodeautor.gov.co
+          - sic.gov.co
+          - dane.gov.co
+          - datos.gov.co                # open data portal (datasets)
+          - dnp.gov.co
+          - banrep.gov.co
+          - invima.gov.co
+          - ins.gov.co
+          - ideam.gov.co
+          - igac.gov.co
+          - cna.gov.co
+          - icfes.gov.co
+        otherHosts:
+          - comunidadandina.org         # Andean Community: official source of Decisión 351
+        allowedTypes: [law, standard, report, dataset]
+    source:
+      reference: "MinTIC Resolución 2715 de 2011 (keeps .gov.co for State entities; the .gob.co transition was not carried out); MinTIC 2025 notice on the gov.co/mil.co/edu.co/org.co operator for public entities. Host list checked by HTTP request for this pack."
+      url: "https://normograma.crcom.gov.co/crc/compilacion/docs/resolucion_mintic_2715_2011.htm"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: secondary_source }
+    supersedes: []
+
+  - ruleId: CO.DOMAINS.STANDARDS_BODY.01
+    level: RECOMMENDATION
+    authority: { organization: alisio-plugin-thesis }
+    document: { id: CO-OFFICIAL-DOMAINS, version: "2026-10-04" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: official_domain_allowlist
+      values:
+        tier: primary
+        explicitHosts: [icontec.org]    # national standards body; returned 403 to curl on 2026-10-04 (bot protection)
+        allowedTypes: [standard]
+    source:
+      reference: "ICONTEC is the Colombian national standardization body (publisher of NTC standards)."
+      url: "https://www.icontec.org/"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: secondary_source }
+    supersedes: []
+
+  - ruleId: CO.DOMAINS.INDEXING.01
+    level: RECOMMENDATION
+    authority: { organization: alisio-plugin-thesis }
+    document: { id: CO-OFFICIAL-DOMAINS, version: "2026-10-04" }
+    status: active
+    appliesWhen: { country: CO }
+    requirement:
+      kind: official_domain_allowlist
+      values:
+        tier: indexing                  # NEVER grants VERIFIED_PRIMARY; discovery/metadata only
+        explicitHosts:
+          - scielo.org.co               # SciELO Colombia (HTTP 200; HTTPS refused on 2026-10-04)
+          - publindex.minciencias.gov.co  # journal indexing service; overrides the gov.co primary match
+          - scienti.minciencias.gov.co    # CvLAC/GrupLAC researcher registries; overrides the gov.co primary match
+        note: "Articles found here are peer-reviewed candidates that still need Crossref/OpenAlex verification (VERIFIED_PEER_REVIEWED), not primary sources."
+    source:
+      reference: "Classification decision for this pack: indexing services list publications they do not author."
+      url: "https://scielo.org/"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: secondary_source }
+    supersedes: []

package/policy-packs/countries/CO/privacy/ley-1581-2012.yaml

@@ -0,0 +1,197 @@
+# Ley Estatutaria 1581 de 2012 (personal data protection; authority: SIC) and its regulation,
+# Decreto 1377 de 2013, now compiled in Decreto 1074 de 2015 (DUR Comercio), Libro 2, Parte 2,
+# Título 2, Capítulo 25. Rules cite the current DUR article and the original 1377 article.
+# Ethics triggers: identifiable_personal_data, sensitive_data, minors (see P0.6-results.md).
+rules:
+  - ruleId: CO.LEY1581.2012.TRIGGER.PERSONAL_DATA
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: identifiable_personal_data
+        definition: "Dato personal: Cualquier información vinculada o que pueda asociarse a una o varias personas naturales determinadas o determinables"
+        requires:
+          - CO.LEY1581.2012.CONSENT.04C
+          - CO.LEY1581.2012.INFORM.12
+          - CO.LEY1581.2012.SECURITY.04G
+          - CO.LEY1581.2012.PUBLICATION.04F
+          - CO.D1074.2015.AUTHORIZATION_PROOF.2_2_2_25_2_5
+        thesisSection: data_handling   # method chapter subsection or annex describing purpose, consent, storage, access, anonymization
+    source:
+      reference: "Ley 1581 de 2012, art. 3 lit. c"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.CONSENT.04C
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: consent_requirement
+      values:
+        timing: prior_to_collection
+        qualities: [prior, express, informed]
+        validForms: [written, oral, unequivocal_conduct]
+        silenceIsConsent: false
+        evidenceRequired: true
+        quote: "El Tratamiento sólo puede ejercerse con el consentimiento, previo, expreso e informado del Titular."
+        note: "Art. 10 lit. d waives authorization only where a law authorizes processing for historical, statistical or scientific purposes; it is not a blanket research exemption."
+    source:
+      reference: "Ley 1581 de 2012, arts. 4 lit. c, 9, 10 lit. d; Decreto 1074 de 2015, art. 2.2.2.25.2.4 (Decreto 1377 de 2013, art. 7)"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.INFORM.12
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: consent_requirement
+      values:
+        informationSheetElements:
+          - processing_and_purpose
+          - optional_answers_for_sensitive_or_minors_data
+          - data_subject_rights
+          - controller_identification_and_contact
+        evidenceRequired: true
+        quote: "deberá informarle de manera clara y expresa lo siguiente: a) El Tratamiento … y la finalidad del mismo; b) El carácter facultativo de la respuesta a las preguntas … sobre datos sensibles o sobre los datos de las niñas, niños y adolescentes; c) Los derechos…; d) La identificación…"
+    source:
+      reference: "Ley 1581 de 2012, art. 12 and parágrafo"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.SECURITY.04G
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: data_protection
+      values:
+        measures: [technical, human, administrative]
+        describeIn: data_handling
+        confidentialityDuty: all_team_members_including_after_study
+        quote: "se deberá manejar con las medidas técnicas, humanas y administrativas que sean necesarias para otorgar seguridad a los registros evitando su adulteración, pérdida, consulta, uso o acceso no autorizado"
+    source:
+      reference: "Ley 1581 de 2012, art. 4 lit. g, h"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.PUBLICATION.04F
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: data_protection
+      values:
+        publication: no_identifiable_personal_data_in_thesis_repository_or_open_dataset_unless_access_controlled
+        checks: [anonymize_before_publication]
+        quote: "Los datos personales, salvo la información pública, no podrán estar disponibles en Internet u otros medios de divulgación o comunicación masiva, salvo que el acceso sea técnicamente controlable"
+    source:
+      reference: "Ley 1581 de 2012, art. 4 lit. f"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.TRIGGER.SENSITIVE_DATA
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: sensitive_data }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: sensitive_data
+        categories: [racial_or_ethnic_origin, political_orientation, religious_or_philosophical_beliefs, union_or_social_organization_membership, human_rights_organization_membership, political_party_interests_or_opposition_rights, health, sex_life, biometric]
+        default: processing_prohibited
+        allowedWhen: [explicit_authorization, scientific_purpose_with_identity_suppression]
+        requires:
+          - CO.D1074.2015.SENSITIVE.2_2_2_25_2_3
+          - CO.LEY1581.2012.CONSENT.04C
+        quote: "Se prohíbe el Tratamiento de datos sensibles, excepto cuando: a) El Titular haya dado su autorización explícita … e) El Tratamiento tenga una finalidad histórica, estadística o científica. En este evento deberán adoptarse las medidas conducentes a la supresión de identidad de los Titulares."
+    source:
+      reference: "Ley 1581 de 2012, arts. 5 and 6 lit. a, e"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.D1074.2015.SENSITIVE.2_2_2_25_2_3
+    level: REGULATION
+    authority: { organization: Presidencia de la República de Colombia }
+    document: { id: DECRETO-1074-2015, version: "2015" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: sensitive_data }
+    requirement:
+      kind: consent_requirement
+      values:
+        mustInform: [authorization_of_sensitive_data_is_optional, which_items_are_sensitive]
+        participationConditionedOnSensitiveData: false
+        quote: "1. Informar al titular que por tratarse de datos sensibles no está obligado a autorizar su Tratamiento. … Ninguna actividad podrá condicionarse a que el Titular suministre datos personales sensibles."
+    source:
+      reference: "Decreto 1074 de 2015, art. 2.2.2.25.2.3 (Decreto 1377 de 2013, art. 6)"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=76608"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.D1074.2015.AUTHORIZATION_PROOF.2_2_2_25_2_5
+    level: REGULATION
+    authority: { organization: Presidencia de la República de Colombia }
+    document: { id: DECRETO-1074-2015, version: "2015" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: identifiable_personal_data }
+    requirement:
+      kind: consent_requirement
+      values:
+        evidenceRequired: true
+        evidenceExamples: [signed_forms, recordings, logs]
+        quote: "Los Responsables deberán conservar prueba de la autorización otorgada por los Titulares de datos personales"
+    source:
+      reference: "Decreto 1074 de 2015, art. 2.2.2.25.2.5 (Decreto 1377 de 2013, art. 8)"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=76608"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []
+
+  - ruleId: CO.LEY1581.2012.TRIGGER.MINORS
+    level: LAW
+    authority: { organization: Congreso de la República de Colombia }
+    document: { id: LEY-1581-2012, version: "2012" }
+    status: active
+    appliesWhen: { country: CO, ethicsTrigger: minors }
+    requirement:
+      kind: ethics_trigger
+      values:
+        trigger: minors
+        default: processing_proscribed_except_public_data
+        allowedWhen: [best_interest_of_child, fundamental_rights_respected, legal_representative_authorizes_after_child_is_heard]
+        quote: "Queda proscrito el Tratamiento de datos personales de niños, niñas y adolescentes, salvo aquellos datos que sean de naturaleza pública."
+        note: "Sentencia C-748 de 2011 conditioned art. 7; the conditioned wording was not verified (open question)."
+    source:
+      reference: "Ley 1581 de 2012, art. 7; Decreto 1074 de 2015, art. 2.2.2.25.2.9 (Decreto 1377 de 2013, art. 12)"
+      url: "https://www.funcionpublica.gov.co/eva/gestornormativo/norma.php?i=49981"
+      retrievedAt: "2026-10-04"
+    verification: { lastChecked: "2026-10-04", basis: official_text }
+    supersedes: []