Paraguay speeds up cyber law and data rules

Paraguay's Senate and Chamber of Deputies moved two digital policy bills forward this week. At the same time, Law No. 7,593/2025 on Personal Data Protection has already been enacted, but it is not yet fully in force and will only become enforceable in November 2027, while Congress continues to study artificial intelligence initiatives.

What happened in the Senate with the anti-cyberbullying bill?

The Senate's Commission on Family, Children, Adolescents and Youth held an interinstitutional technical meeting to review the bill that would prevent and punish school bullying and cyberbullying in educational institutions. During that session, amendments were proposed and another meeting was set to discuss them.

The bill was introduced by Senator Lizarella Valiente of the ANR on April 20, 2026. According to 1000 Noticias, its goal is to update the current rules on bullying and cyberbullying at the preschool, elementary and secondary levels. The fact that changes were raised and another meeting was scheduled shows the text is still under legislative review and has not reached a final decision.

What did Deputies decide about the future Cybersecurity Law?

The Chamber of Deputies decided to organize an interinstitutional technical meeting to work through changes to the Cybersecurity Law bill and make sure the future law is, according to parliamentary coverage, 100% enforceable.

The Chamber's official website said the initiative aims to establish a comprehensive legal framework to prevent, detect and respond to cyber threats and incidents, as well as protect computer systems, information and critical infrastructure in the country. ABC Color added that during the public hearing, several deputies said the technical working group should be respected and criticized what happened with the Personal Data Protection Law, where, they said, the ruling majority dismissed two years of debate to impose an alternative version that arrived the same day as the session.

How does this connect to the data law and AI?

Law No. 7,593/2025 on Personal Data Protection was enacted as the country's first comprehensive data law, but it is not yet fully in force and is expected to become enforceable only in November 2027, after a two-year vacatio legis.

According to a legal analysis by Diego Ceredi, the law is based on Europe's GDPR and creates the National Personal Data Protection Agency, under MITIC, with inspection powers and administrative sanction authority. The same analysis says the planned fines range from 20 to 2,500 minimum wage units for general violations, rise to 5,000 units when sensitive data is involved, and reach 10,000 units when violations affect data belonging to children or adolescents.

Economía Virtual Paraguay also noted that while Law 7,593/2025 awaits full implementation, Congress is reviewing two bills aimed at regulating artificial intelligence, and no specific AI law has yet been enacted. In the same vein, La Nación Paraguay reported that in May 2025, a bill was introduced in the Senate to regulate and promote the creation, development, innovation and implementation of AI systems, with risk classification, prevention and mitigation measures, and protection for affected individuals' rights.

Diario Libre added that the new legislative session included proposals related to justice, water, cybersecurity and artificial intelligence, and that the president of the Chamber of Deputies highlighted the need for a specific AI law because of its impact on education, health, employment, justice, security and public services.