This Decree also forces ISPs and telecom providers in Colombia to continuously collect and store records for five years documenting the online location and subscriber information of millions of ordinary users in Colombia. This mandate will expand Colombia’s ability to surveil its citizens, ultimately damaging individual privacy, anonymity, and free expression. Most ISPs and telcos in Colombia currently give subscribers a dynamic IP address that changes periodically, but this mandatory data retention obligation will force Colombian ISPs and telecom providers to keep records of all of their IP address allocations to allow law enforcement to more easily identify a particular individual. This data will be available to the prosecutor or “any competent authority”.