Colombia's Constitutional Court has just set clear rules on one of the most debated issues in digital law: whether consent to publish personal content online can be revoked at any time, and what platforms must do when that happens. The answer, set out in the Ruling T-184 of 2026, has direct consequences for technology companies, marketing agencies, audiovisual production houses, and any business that collects images, videos, or personal data from its clients, employees, or users.
The Facts Behind the Ruling
The case reached the Court through a constitutional protection action (acción de tutela) filed by a 19-year-old woman against the person with whom she had verbally agreed to produce audiovisual content for distribution on international platforms, on the condition that the material would not circulate within Colombia. The plaintiff signed a consent document without fully understanding its scope. The content was ultimately published with no geographic restriction across various sites and social media, and remained in circulation even after the plaintiff expressly requested its removal.
The Legal Question
The Second Review Chamber, with Justice Carlos Camargo Assis as rapporteur, had to determine whether the distribution of intimate content based on flawed consent — due to insufficient information about its risks and scope — and the failure to remove it after the plaintiff's retraction, violated her fundamental rights to privacy, image, reputation, and a life free from violence.
The Rules Set by the Constitutional Court
The ruling develops a standard applicable to any authorization for the use or distribution of personal content, not only within the specific case at hand:
- Consent must be clear, unequivocal, specific, and informed. The Court requires that, at the time of authorizing, the person granting consent must know how the content will be used, its commercial scope, the media and countries where it will be distributed, and the security and unauthorized-reproduction risks involved.
- Consent is inherently revocable. According to the Court, “consent is also inherently revocable. Accepting that something occurs does not mean allowing it to be perpetuated over time, indefinitely or for a prolonged period” (Ruling T-184 of 2026).
- Withdrawal of consent admits no additional conditions. The Court held that “the decision to revoke that authorization, as an expression of the absence of will, withdrawal, or lack of consent, must be equally safeguarded without any additional conditions being imposed” (Ruling T-184 of 2026).
- Digital platforms have an active duty to cooperate. The Court urged “the digital platforms on which the videos were replicated to, within their capabilities, fully cooperate in addressing requests for content removal” (Ruling T-184 of 2026), which includes maintaining accessible notice-and-takedown mechanisms.
The Ruling
The Court upheld the protection of the plaintiff's fundamental rights, ordered the defendant to immediately remove the content, identify every platform where it circulates, and implement effective measures for its removal, and directed the digital platforms involved to cooperate toward that end. It also called on Congress and the Ministry of Information and Communications Technologies to advance specific regulation — including criminal regulation — of the non-consensual distribution of intimate content.
What This Means for Businesses and Individuals in Colombia
Although the case arose in the context of gender-based digital violence, the consent standard set by the Court is of general application and closely affects several sectors:
- Image rights and copyright assignment contracts. Image-use authorization clauses in contracts with models, influencers, employees, or event participants must precisely describe the uses, terms, territories, and distribution channels; a generic or ambiguous authorization is more vulnerable to challenge.
- Platforms and social media. Companies that operate digital platforms must maintain effective, responsive notice-and-takedown channels, since the Court imposes on them a concrete duty to cooperate with removal requests.
- Audiovisual production and marketing. Photographers, production companies, and agencies that reuse client or public material in advertising campaigns must be prepared to handle removal requests, even where consent was previously signed.
- Personal data protection. The Court's standard aligns with the general data protection framework under the Law 1581 of 2012, which likewise requires that authorization for processing personal data — including images — be prior, express, and informed, and recognizes the data subject's right to revoke it at any time.
Iniciativa Legal's Recommendations
We recommend that companies collecting, publishing, or distributing third-party images, videos, or personal data review their authorization forms and internal policies for handling removal requests, so that they meet the information and revocability standards set by the Constitutional Court. At Iniciativa Legal, we help our clients draft image-assignment and copyright clauses, personal data processing policies, and request-handling protocols aligned with this new precedent.
Sources: