Guatemala City, where the congressional commission approved the revised cybersecurity bill on 4 October 2026. (File photo)

GUATEMALA · POLITICS

A Guatemalan congressional commission has approved a revised cybersecurity bill that would place a new National Cybersecurity Directorate under the Ministry of the Interior. The decision, taken on 4 October 2026, moves Initiative 6347 one step closer to a full vote in Congress.

La Hora reported that the National Security Affairs Commission issued a new favourable committee opinion with amendments after roughly five months of additional review. The bill still requires debate and approval by the full Congress before it can become law.

What the revised bill proposes

The most significant institutional change is the placement of the National Cybersecurity Directorate inside the Ministry of the Interior, known in Guatemala as the Ministerio de Gobernación. The Ministry of National Defense would retain responsibility for national cyberdefence.

The proposed directorate would function as a specialised technical-operational state security body with its own budget. It would draft the National Cybersecurity Policy and prepare national and sectoral strategies, plans and protocols.

The directorate would also coordinate prevention, response and recovery after cyber incidents. It would maintain a registry of incident-response centres and cybersecurity officers, and coordinate technical cooperation and information-sharing with Defence while preserving each ministry’s legal authority.

A council chaired by the president

The bill would create a National Cybersecurity Council chaired by the President of Guatemala. The directorate’s chief would serve as council secretary.

That official would be appointed by the President from a three-person shortlist submitted by the council. The arrangement concentrates appointment power in the executive while giving the council a formal role in selecting candidates.

The proposal also seeks administrative sanctions and a criminal and procedural framework for cybercrime. Earlier congressional summaries described proposed prison terms including four to six years for unlawful access, six to 10 years for unlawful interception, and five to 10 years for attacks on data or computer-system integrity, plus fines of Q100,000–Q300,000.

Why the bill returned to committee

The background dispute concerns institutional control and the Defence Ministry’s role. On 14 April 2026, Congress voted 94–0 to return Initiative 6347 to the National Security Affairs and Economy and Foreign Trade committees for separate reconsideration.

Commission chairman Jorge Mario Villagrán said the committees had not issued a joint opinion and expected congressional approval later in 2026. The unanimous vote signalled broad political support for a revised text, even as lawmakers debated which ministry should lead civilian cybersecurity.

The congressional record identifies Initiative 6347 as received on 27 February 2024 and first presented to the plenary on 5 March 2024. A previous favourable amended opinion was issued on 26 August 2025.

What comes next

Committee approval alone does not enact the law. The revised opinion must now proceed through congressional debate and a plenary vote.

For foreign investors and companies operating in Guatemala, the bill signals a move toward formalised incident reporting and clearer institutional responsibility. The proposed sanctions and criminal provisions would create new compliance considerations once the text is finalised.

The timeline remains uncertain, but Villagrán’s expectation of approval later in 2026 suggests the cybersecurity framework could advance before the current legislative period closes.

Related reading: Who Is Bernardo Arévalo, Guatemala's President in 2026; Guatemala Explained 2026: The Country, Its Politics, Its Economy and What to Watch; Moving to Guatemala 2026 — Residency, Costs and Your First Year Explained; more from Guatemala.

Did Guatemala’s Congress approve the cybersecurity law?

No. A congressional commission approved a revised favourable opinion on 4 October 2026, but the full Congress still must debate and vote on the bill.

Which ministry would oversee the National Cybersecurity Directorate?

The proposed directorate would sit under the Ministry of the Interior, while the Ministry of National Defense would keep responsibility for national cyberdefence.

What penalties does the bill propose for cybercrime?

Earlier congressional summaries described prison terms of four to 10 years depending on the offence, plus fines of Q100,000 to Q300,000.

When could the cybersecurity bill become law?

Commission chairman Jorge Mario Villagrán said he expected congressional approval later in 2026, but no final vote date has been set.

Sources: lahora.gt, congreso.gob.gt, congreso.gob.gt, congreso.gob.gt, congreso.gob.gt. Retrieved 4 October 2026.

This article was drafted with automated assistance and reviewed before publication. How we use AI · Report an error · Editorial responsibility: Matthias Camenzind, Editor-in-Chief

Frequently Asked Questions