Guatemala, Mexico Push Cybersecurity Laws
Guatemala and Mexico are advancing cyber laws that would reshape oversight, add new authorities and set penalties.
In Guatemala, Initiative 6771 has already been reviewed by the Digital Government Observatory and would create a state framework with the Ministry of Interior as the lead authority. In Mexico, a federal cybersecurity law remains under Senate debate and could be published in the second half of 2026.
Guatemala: a new state framework
In Guatemala, the analysis of Initiative 6771 prepared by the Digital Government Observatory says the proposal would create a National Cybersecurity System while also assigning the Ministry of Interior the role of lead authority for national policy on the issue.
The planned structure would also add a National Cybersecurity Body as a technical unit within that ministry. According to the document cited by the observatory, that body would be responsible for coordinating and carrying out nationwide strategies.
The proposal also adds a sanctions regime with fines of up to 2% of annual revenue for operators of essential services. It also introduces specific cybercrime offenses into the Criminal Code.
Mexico: a federal law under debate
In Mexico, public discussion centers on a bill identified as the Federal or General Cybersecurity Law, which is moving through the Senate. The text is organized into 64 articles and is intended to become the first Mexican federal law to comprehensively structure cybersecurity governance.
An independent technical analysis says the draft would create a National Cybersecurity Agency, a registry of critical infrastructure, and a requirement for organizations to designate a cybersecurity officer. It also foresees a sanctions regime with significant fines.
According to that same analysis, publication is expected in the second half of 2026. The study adds that the future law would be linked to an existing strategic framework, since Mexico already has the General Policy of the National Cybersecurity Plan in force, published in the Official Gazette of the Federation in December 2025 by the Digital Transformation and Telecommunications Agency.
That places the legislative proposal in direct relation to a framework that already has official guidelines in operation, with compliance implications for companies that operate critical infrastructure or digital services.
Sources
- Bajo la Lupa | El Congreso inició el análisis de la iniciativa 6771 de ciberseguridadx.com· CentraNews Guatemala
- Cronología de la IA en Paraguaymuchotexto.net· MuchoTexto.net
- Projeto de Lei n° 4752, de 2025 - Marco Legal da Cibersegurançawww25.senado.leg.br· Senado Federal do Brasil
- Ciberseguridad de los organismos del Estado e infraestructura crítica de la información (Ley 21.663)bcn.cl· Biblioteca del Congreso Nacional de Chile
- Ley de Protección de Datos e inteligencia artificial: el doble desafío que enfrentan las empresas en Chilelexlatin.com· LexLatin
- Latin America Identity Verification Rules (2026)didit.me· Didit / Latin America Identity Verification Rules
- Iniciativa 6771 y la propuesta de ley que redefine la ciberseguridad en Guatemalaogdi.org· Observatorio de Gobierno Digital e Innovación (OGDI) Guatemala
- Debates sobre o Marco Legal da Cibersegurança avançam no Senado Federaldnalaw.law· DNA Law
- La ley de ciberseguridad que viene: qué cambia para tu empresa en 2026 y los huecos legales que nadie te cuentahacking.onesec.mx· OneSec MX / Hacking OneSec
- Regulación y Seguro Cibernético en LATAM: Chile, México y otros mercadosnextguardinsurance.com· NextGuard Insurance



