NewsSeguridad 360 in the news

Personal data protection: bill 6464 is still under review

By CiberCEO de Hoy en Día editorial teamPublished: Updated:
Executive summaryAccording to Emisoras Unidas (July 16, 2026), bill 6464 proposes regulating the processing of personal data by public and private entities, penalizing database breaches and creating a directorate for data protection and digital rights. It is pending a committee report.

News

What was reported

Emisoras Unidas reported on July 16, 2026 that the National Security Affairs Committee is reviewing bill 6464. The proposal regulates the processing of information by public and private entities, sets prison terms and fines for the unlawful use or breach of personal databases, and proposes creating a directorate for personal data protection and digital rights. The bill was introduced in October 2024 and was still pending a report.

Analysis

Why it should matter to you

Although it isn't law yet, the regional trend points toward data protection frameworks with consent, security and notification obligations. Companies that collect data from customers, employees or participants —including web forms— should review now which data they ask for and why.

Recommendation

First steps

  • Collect only the data you need (minimization).
  • Clearly explain what you use it for and obtain consent.
  • Encrypt sensitive data and restrict access.
  • Define how long you keep it and how you delete it.

Conclusions

The best preparation for a data law is to treat data today as if it already existed.

Frequently asked questions

Does Guatemala have a personal data protection law?

There is no general law in force. Bill 6464 is under review in Congress, as reported in July 2026.

Sources

Bring this topic to your organization

The Seguridad 360 Course turns these ideas into habits. Next edition: October 31, 2026 (taught in Spanish).