Condo Bank Statements: Council and Auditor View Access
A condominium can arrange consultation access for an authorized reviewer when its bank supports that profile. Articles 51 and 55 of Law 675 of 2001 define council functions, but do not specify bank credentials.
What it is
Consultation access lets a named person view the bank records covered by their permissions. A review-only setup should exclude transfers, payment approval, beneficiary changes and user administration. The actual permissions need confirmation from the bank.
Davivienda's Portal Empresarial y Corporativo page lists consultation users, approvers and authorized delegates (apoderados). It also lists statement downloads at portal level. It does not define each profile's download rights or eligibility for every condominium account.
Who it applies to
In general, the roles below apply under Ley 675 de 2001. The bylaws (reglamento de propiedad horizontal) and lawful decisions define the property's arrangements.
| Role | Scope relevant to the review |
|---|---|
| Administrator | Represents the condominium under article 50. Keeps responsibility for the accounting under article 51(5). |
| Management council | Where it exists, considers the accounts and reports in article 51(4). Makes decisions within the bylaws under article 55. |
| Statutory auditor (revisor fiscal) | Oversees operations under article 57 and applicable professional rules. This differs from managing the bank account. |
| Individual owner | A bank user and access to condominium documents are separate matters. Neither gives unrestricted access to personal data. |
The administrator's report and statutory auditor guide explain those duties. A council's review does not replace the professional's work.
Personal data and the scope of access
Ley 1581 de 2012, article 4, requires a lawful purpose, restricted access, security and confidentiality. Under articles 3, 4 and 9, consent must be prior, express and informed. Article 10 provides exceptions; the other data safeguards still apply. Article 13 limits who may receive personal information.
A statement can identify individual payers or recipients. These are personal data under article 3. A council appointment or bank permission does not by itself authorize their publication.
Suggested controls include limiting recipients and separating the original from a copy for wider circulation. That copy can use totals or hide unrelated personal details. The reviewer's professional duties and the lawful scope of access need their own assessment.
Steps
How to arrange consultation access
Suggested process for the condominium's authorized representatives. It is not a universal bank procedure:
- Read the bylaws and the reviewer's appointment or mandate.
- Record the review purpose, accounts, periods and authorized recipients.
- Identify the legal basis for access to any personal data.
- Request the bank's consultation profile through its authorized account contact.
- Request an individual user for the reviewer.
- Limit the requested products to the condominium accounts within the review.
- Ask the bank to exclude payment, approval, beneficiary-change and user-management powers.
- Confirm statement viewing and download permissions with the bank.
- Check the permission list without making a transfer or test payment.
- Record who will remove access when the role ends.
As a proposed security control, credentials stay with their named user. A shared login exposes its assigned permissions and makes individual actions harder to trace.
Alternatives when a separate bank user is unavailable
| Option | Limit to document |
|---|---|
| Statement copy from the administrator | Useful evidence; the reviewer has not obtained it directly from the bank. |
| Download observed by the reviewer | The authorized user keeps control of credentials. Record the account, period and source. |
| Copy supplied by the bank to an authorized recipient | Depends on the bank's process and accepted authority. |
| Independent download through a named consultation user | Requires a user enabled under the bank's process, with the relevant account and download permissions. |
These are proposed evidence routes, not services that every bank promises. A copy forwarded by another person is not an independent bank download.
How to use the statement in a review
- Obtain the full statement for the authorized account and period.
- Record how the reviewer obtained it.
- Compare it with the close and its supporting records.
- Request collection detail for grouped credits.
- Document differences for the administrator and accountant to review.
- Keep the original and any limited sharing copy separate.
See referenced collections for grouped credits. The bank reconciliation guide covers the wider comparison. Unidentified payments need supporting evidence before allocation.
Costs
This guide quotes no bank access fee. A request can ask about the portal package, extra users, security devices and historical copies. A bank quote needs to identify which charges apply.
Documents
Suggested preparation: bylaws, appointment record, evidence of legal representation, account list, review scope and bank permission record. The bank determines its own application requirements. Personal-data permissions and any legal exception also need review.
Deadlines
The cited rules do not set a universal monthly date to give a council a bank login. A proposed internal schedule can cover statement delivery, review and removal of access. It must fit the bylaws and the bank's process.
Common mistakes
- Trusting a role name. A label does not prove that payment powers are absent.
- Sharing too widely. A public link or group chat can expose personal data to unauthorized recipients.
- Using an edited original. A sharing copy should not replace the original evidence.
- Keeping old permissions. Access needs review when a council member or auditor leaves.
- Drawing conclusions too soon. A difference needs an explanation; it does not by itself establish wrongdoing.
Exceptions
The requested profile, download rights and available statement periods need confirmation for the current account and portal. The cited bank page does not guarantee these features for every condominium.
The cited articles do not resolve each dispute over access to statements. A Colombian lawyer can assess a refused request and the lawful scope of disclosure. An accountant can assess the records needed for the agreed review.
Sources
Opened on 26 October 2026:
- Ley 675 de 2001, articles 50, 51, 55 and 57.
- Ley 1581 de 2012, articles 3, 4, 9, 10 and 13.
- Davivienda: business portal features.
Educational information, not legal or tax advice. This is not accounting advice. Ask a Colombian lawyer or public accountant about your case.
Next step
Get the free sample checklist.
Frequently asked questions
Can a council member demand the administrator’s bank password?
Council membership does not create a bank login. A defined review can use an authorized individual consultation user or agreed statement copies. The administrator’s personal password is not a review permission.
Does a consultation user have permission to pay?
A review-only setup should exclude payments and approvals. The actual permissions need confirmation with the bank. The role name alone is not proof.
Can the council share complete statements with every resident?
A council role does not remove personal-data rules. The purpose, authorized recipients and lawful basis need review. A wider report can use totals or limited copies. A lawyer can assess disputed access.
Is a forwarded PDF an independent bank download?
No. It is a copy supplied by another person. An independent download means the authorized reviewer obtains the file from the bank through their own access.
Own property in Colombia, or planning to buy? The Colombia Owner Kit (US$79) covers the dates, documents and questions owners face. See what's in it.