Paraguay Sets New Bank Cyber Rules

Paraguay’s second Banking Convention 2026 put cybersecurity rules for banks, electronic wallets and digital platforms at the center of the discussion, while the DNIT and Paraguayan financial institutions advanced an agreement that would let banks access taxpayers’ sworn tax filings, with the taxpayer’s explicit consent, through a web platform integrated with Marangatu.

What responsibilities do they want defined for incidents?

The second Banking Convention Paraguay 2026 raised the need to spell out what banks, electronic wallets and digital platforms are responsible for when a computer incident occurs, as part of a broader effort to protect customers nationwide.

At the same time, the convention opened debate on how the new Data Protection Law will affect banks’ operating model. According to what was discussed at the meeting, the rule change requires an urgent, cross-cutting overhaul of cybersecurity and technology risk management inside financial institutions.

What does the new banking and tax framework include?

The agreement announced between the DNIT and Paraguayan financial institutions would let banks access taxpayers’ sworn tax filings, with the taxpayer’s express consent, through a web platform integrated with Marangatu.

The framework includes electronic authentication, encryption, digital signatures and full traceability for every query. According to the DNIT, the system will record who accessed the data, when they did it and under what authorization, creating a trail useful for future audits and reducing the use of forged documents in credit risk analysis.

The DNIT itself links this line of work to more auditable controls in the tax infrastructure. In a recent general resolution cited by Impuestos Py, the adoption of qualified electronic signature certificates in Marangatu was tied to fiscal traceability of operations in compliance with Law 7411/2024.

What shared agenda are ASOBAN and the DNIT pushing for 2026?

ASOBAN has been putting the financial system’s transformation driven by artificial intelligence, along with cybersecurity and regulatory challenges, on its 2026 agenda, placing the issue at the center of Paraguay’s banking regulatory debate.

ABC Color also reported that the Paraguayan Bankers Association held the second Banking Convention as the country’s main financial-sector gathering, with discussions on cybersecurity and data protection linked to the future of the financial system. The outlet also noted that since August 2025 there has been a formal cooperation agreement between the DNIT and ASOBAN for information sharing and control coordination.

Osvaldo Serafini, then president of ASOBAN, described that agreement as "an extremely important milestone to exchange information and reach people with greater security, avoiding fraud." That background reinforces the tax-bank traceability and coordination theme now returning to the sector’s agenda.

A regional report from Pytagua added that DNIT and ASOBAN signed an agreement to create, starting in 2027, a secure data-sharing platform for tax and banking information, within a broader framework that also includes a review of special regimes and crypto asset regulation to increase tax collection.