• The Superintendency of Commerce and Industry said WhatsApp is not meeting 75% of data protection rules in a 2012 law;
• WhatsApp collects data via cookies on at least 39 million active users per month in the Andean country;
• Non-compliance with the order could result in investigations and fines of up to 2,000 minimum-wage salaries.

Colombia‘s top consumer protection watchdog on Wednesday ordered messaging application WhatsApp to take measures to protect users’ personal data, saying it was violating more than half of the regulations governing such information.

The Superintendency of Commerce and Industry said WhatsApp, owned by social network giant Facebook, needed to comply with rules meant to ensure users can know, update and correct information about them held in databases and by companies.

The app is also not meeting 75% of data protection rules in a 2012 law, the regulator said in a statement. WhatsApp did not immediately respond to a request for comment.

READ ALSO: HBO Max arrives in Latin America on June 29 with a subscription starting at $ 3

WhatsApp collects data via cookies on at least 39 million active users per month in the Andean country with a population of about 50 million, the regulator said.

WhatsApp should “create a treatment of information policy (PTI) which complies with all the requirements demanded by Colombian regulation,” the regulator said. “The PTI should be known to the owners of data who are domiciled or resident in Colombian territory.”

READ ALSO: Mexican fintech Clara raises a $30 million Series A round to expand its corporate spend-management solution across Latin America

The app should also register its database with the regulator, it added.

Non-compliance with the order could result in investigations and fines of up to 2,000 minimum-wage salaries, equivalent to about $486,000, or the eventual suspension of WhatsApp activities in Colombia.