Guatemala, Chile, Colombia move cyber laws

Guatemala revisits cybercrime bill after technical review

Guatemala’s Bill 6347 on cybercrime remains under debate in Congress. Introduced in February 2024, it received a favorable opinion with amendments in August 2025, cleared two debates in September 2025, and in April 2026 the full chamber sent it back to committee to correct technical flaws and review its legal language.

The proposal would amend the Penal Code to define computer-related offenses, including attacks on data integrity, attacks on system integrity, computer fraud, and the misuse of technological devices. Proposed prison terms range from three to nine years, depending on the conduct.

Infobae also reported that Article 275 Bis would punish unlawful access to computer systems or databases with three to six years in prison. Under the same framework, attacks on system integrity would carry six to nine years, while misuse of technological devices would bring three to five years.

Congress asked the Economy and Foreign Trade Committee and the National Security Affairs Committee to prepare a joint opinion to align the technical and legal criteria before the bill returns to the floor.

Chile sets rules for deepfakes

In Chile, the Chamber of Deputies approved in general, in the first constitutional stage, a bill regulating the creation and distribution of realistic digital imitations, or deepfakes, of a person’s image, body, or voice generated with artificial intelligence. The vote ended with 128 in favor, two against, and five abstentions.

After that general approval, the bill returns to the Future, Science, Technology, Knowledge and Innovation Committee for a vote on each article. According to Diario Financiero, the measure applies to both individuals and legal entities, as well as to social media platforms offering services in Chile.

The bill would require the appointment of a legal representative with an address in the country, the creation of a reporting channel, and clear labels for content generated or altered with AI. It also gives enforcement powers to the future Personal Data Protection Agency, which could fine individuals and legal entities between 5,000 and 10,000 UTM for violations.

DPL News added that the text defines and penalizes the creation or spread of deepfakes that could mislead people about someone’s identity.

Mendoza pushes its own cyber law

In the province of Mendoza, the Security Ministry is promoting a Cybersecurity Law that has already begun legislative review. The initiative is aimed at building out the government’s defense against breaches caused by unauthorized access to state systems.

The bill would create a Provincial Cybersecurity Incident Registry, regulate public and private digital infrastructure linked to the state, and recognize the white hat, or ethical hacker, as someone who tests systems to identify security flaws.

Colombia issues child protection rules

The Colombian government issued Decree 0769 of 2026, which regulates Law 2489 of 2025 and sets shared responsibilities for digital platforms, schools, and families to ensure safe digital environments for children and adolescents.

The rule targets risks such as cyberbullying, exploitation and sexual abuse online, as well as inappropriate content. DPL News reported that the decree also places obligations on digital platforms.

A regional regulatory agenda moving on several fronts

The regional picture shows different but converging tracks, Guatemala is still refining how cybercrime is defined, Chile is moving ahead on deepfakes and platform obligations, Mendoza is debating its own framework for incidents and access to state systems, and Colombia has already set out shared duties for protecting minors online.

Chile’s National Congress Library, in its Easy Law sheet on cybersecurity for state agencies and critical information infrastructure, says the law creates a cybersecurity institutional framework, defines general principles, and sets minimum requirements for prevention, containment, resolution, and response to incidents for public agencies, along with coordination mechanisms with private operators of critical infrastructure.