Up to 20% of DataCrédito reports contain some type of error: a delinquency you already paid that still shows as active, a debt you do not recognize, a closed product that appears open. Each of those errors is lowering your score and closing credit doors through no fault of your own. The good news: in Colombia the right to habeas data is enshrined in the Constitution and developed by Law 1266 of 2008, and you have concrete legal tools to demand correction. The process is not complicated — but it requires following the right steps in the right order.
Errors in Colombian credit history fall into four main categories. First, paid delinquencies that still appear active: you pay off a debt in arrears, the bank reports the payment, but DataCrédito does not update the status or does so with a delay. Second, debts you do not recognize: a loan or card in your name that you never applied for — this can be an administrative error at the bank (similar name, incorrectly entered ID number) or, in the more serious case, identity theft. Third, closed products that appear active: a card you cancelled two years ago still shows as open with a balance. Fourth, incorrect balances or dates: the debt amount in the report does not match the actual balance, or the delinquency date is wrong (which affects how long the negative entry stays on your record). Before initiating any claim, download your full report from app.midatacredito.com and document exactly what information is incorrect and why. The comparison between the report and your own documentation — bank statements, payment receipts, bank certifications — is the foundation of any successful claim.
Financial habeas data in Colombia is protected by Article 15 of the Political Constitution and developed by Law 1266 of 2008 (the Habeas Data Law). This law establishes that every person has the right to know, update, and correct information about themselves held in databases. DataCrédito, as the operator of a financial database, has a legal obligation to guarantee the accuracy of the information it stores. The legal process is clear: when you file a formal claim, DataCrédito has 15 business days to investigate and respond. If the investigation requires consulting the financial institution that reported the information, that deadline may be extended — but DataCrédito must notify you of the reason and the extension. One critical point that most people do not know: DataCrédito cannot unilaterally correct information without the consent of the institution that reported it (the bank). This means the process necessarily involves engaging the bank that generated the erroneous report. DataCrédito acts as an intermediary and applies regulatory pressure, but the technical correction requires the bank to send the update to the system.
The correct process involves two simultaneous fronts. First, file a right of petition (derecho de petición) with the bank that reported the incorrect information. The derecho de petición is a constitutional mechanism (Article 23 of the Constitution) that obliges any public or private entity to respond within a maximum of 15 business days. The document should include: your complete identification details, a precise description of the error with dates and amounts, documentary evidence proving the incorrect information (payment receipt, bank statement, certification), and an explicit request for correction to DataCrédito. Second, simultaneously log into app.midatacredito.com, go to the habeas data or claims section, select the product or incorrect information, and register the formal claim attaching the same supporting documents. DataCrédito follows up with the bank. If the bank confirms the error and sends the correction, DataCrédito updates the report in the next processing cycle — generally within 5 business days after receiving the bank's confirmation. Save all case numbers and receipt confirmations: they are your evidence if the process stalls.
If 15 business days pass without a response, or if the response does not resolve the error, you have three additional escalation paths. First escalation: the Superintendencia Financiera de Colombia (SFC) at www.sfc.gov.co. The SFC supervises both banks and credit bureaus and has sanctioning power over institutions. You can file a formal complaint through the SFC's PQRSF system, which responds within 15 business days and can order the correction. Second escalation: the institution's Financial Consumer Ombudsman (Defensor del Consumidor Financiero). Every bank supervised by the Superfinanciera has an independent Ombudsman you can escalate to at no cost. Their resolution is not binding but generates institutional pressure. Third escalation: the tutela action. If the error in DataCrédito is violating a fundamental right — for example, preventing you from accessing social housing credit or affecting your right to work — you can file a tutela before any judge, who has 10 days to rule. In cases of identity theft, the path is more urgent: file a criminal complaint with the Fiscalía immediately and request a preventive block in DataCrédito while the investigation proceeds.