Chile, Guatemala Advance Cybersecurity Laws

Chile and Guatemala both moved forward with legislative changes tied to privacy and cybersecurity, although the available information in both cases comes from secondary coverage and some details have not yet been confirmed in official publications. In Chile, according to Garrigues, the Senate reportedly approved in first reading the bill that delays the entry into force of Law 21.719. In Guatemala, Congress approved Initiative 6347 as the Framework Cybersecurity Law, with 121 votes in favor and 10 against, according to several local reports.

What happened to Chile's data protection law?

According to Garrigues, Chile's Senate reportedly gave the green light in the first constitutional reading to Bill No. 18.623-07, introduced by presidential message. The proposal postpones the entry into force of Law No. 21.719 on the protection and processing of personal data and the creation of the Personal Data Protection Agency.

The same source said the bill would next move to the Chamber of Deputies for its second constitutional reading. It also said the delay would push the effective date from Dec. 1, 2026, to Oct. 15, 2027, although it stressed that the legislative process still had to be completed and the measure published before taking effect.

What did Guatemala's Congress approve?

Guatemala's Congress approved Initiative 6347 as the Framework Cybersecurity Law through an expedited national-interest procedure, according to Infobae, Soy502 and TN23. The vote was 121 in favor and 10 against, following an earlier motion to fast-track the measure that passed with 109 votes in favor and 10 against.

Prensa Libre said the initiative was first introduced on Feb. 27, 2024, received a favorable committee report on Sept. 30, 2026, and was pushed for expedited approval by lawmaker Victoria Palala. That report also said the approved text would have been turned into Legislative Decree 26-2026.

What scope do reports describe for Guatemala?

News reports describe a 96-article law aimed at preventing, responding to and investigating incidents, protecting data and systems, and regulating digital conduct. Infobae added that Decree 26-2026 would cover administrative, criminal and procedural provisions, as well as international cooperation, prevention, training and investigation, although that scope should be verified against the official text.

Soy502 reported that the law would also strengthen protection for computer systems and critical digital infrastructure, and would create the National Cybersecurity Council, the National Cybersecurity Directorate and Guatemala's Cybersecurity Incident Response Center. TN23 added that it would seek to prevent unauthorized access, combat fraud through technology platforms and define criminal conduct linked to the misuse of digital systems.

When would the Guatemalan law take effect?

The effective date does not appear consistently in the available sources and has not been confirmed in an official publication. La Hora reported that Legislative Decree 26-2026 would take effect 30 days after its publication in the official gazette, but that condition remained unverified by official sources.