Guatemala: technology regulation at a glance

Framework: No dedicated crypto law in force. The quetzal is the sole legal tender under Monetary Law (Decreto 17-2002); the Superintendencia de Bancos (SIB) regulates the financial sector. Legislative Initiative No. 6538 ('Ley de Criptomonedas en Guatemala'), introduced May 12 2025, would create the first dedicated crypto framework under SIB supervision, not yet enacted as of mid-2026.

Cryptocurrency activity is legal in Guatemala but operates in a regulatory vacuum: there is no specific crypto statute, no VASP licensing regime, and no formal tax classification for digital assets. The SIB and Banco de Guatemala have issued risk warnings, and Bill 6538, introduced in Congress in May 2025, proposes SIB-supervised registration for all VASP platforms, voluntary-use rules, AML/KYC obligations, and partial tax exemptions, but the bill had not been enacted as of the research date. A parallel AML overhaul bill (No. 6593) would also extend reporting-entity obligations to VASPs.

Framework: No AI law in force; National AI Strategy (ENIA) under co-creation led by the Comisión Presidencial de Gobierno Abierto y Electrónico (GAE) with UNDP support; legislative bill pending in Congress

Guatemala has no enacted AI legislation or formal national AI strategy as of mid-2026. The Presidential Commission for Open and Electronic Government (GAE) is leading a participatory co-creation process for a National Artificial Intelligence Strategy (ENIA), with validation scheduled for June 2026. A congressional bill targeting deepfakes and AI misuse was introduced in October 2025 but remains pending committee assignment.

Framework: Law on Access to Public Information, Decree 57-2008 (LAIP); no dedicated data protection law, multiple bills (Initiatives 6103, 6572, and a 2025 GDPR-modelled bill) pending in Congress

Guatemala has no enacted comprehensive personal data protection law as of May 2026. The Law on Access to Public Information (Decree 57-2008) provides limited habeas data rights and definitions for personal and sensitive data, but primarily covers public-sector records. Multiple GDPR-inspired legislative proposals have been introduced in Congress in 2022-2025 and remain under debate without final approval.

Framework: Ley de Bancos y Grupos Financieros (Decreto 19-2002); Ley Orgánica del Banco de Guatemala (Decreto 16-2002); supervised by Superintendencia de Bancos (SIB) and Junta Monetaria / Banco de Guatemala

Guatemala lacks a dedicated fintech or e-money licensing regime; non-bank payment service providers operate under general commercial law or must obtain a banking licence, with oversight by the Superintendencia de Bancos (SIB) and Banco de Guatemala. A 2024 Credit Card Law (Decreto 2-2024) introduced consumer protections for card-based payments, and a draft e-money bill has been under SIB development, but no comprehensive digital-payments licensing framework has been enacted as of mid-2026. The fintech ecosystem is growing rapidly, ~119 companies, ~23% expansion in 2025, ahead of the regulatory structure.

Framework: Código de Migración (Decreto 44-2016, Congress of Guatemala), implemented via Acuerdo IGM-016-2025 (Reglamento de Residencias Guatemaltecas) and Acuerdo IGM-017-2025, administered by the Instituto Guatemalteco de Migración (IGM)

Guatemala introduced a dedicated temporary residence category for digital nomads and remote workers, effective 8 October 2025, under Acuerdo IGM-016-2025. The permit is valid for one year (renewable) and covers foreign nationals employed by companies outside Guatemala or who are self-employed, provided they do not generate local income. After five years of continuous residence, holders may apply for permanent residency.

Framework: Fragmented provisions: Penal Code cybercrime articles (since 2000), Ley de Protección Integral de la Niñez y Adolescencia (LPINA), Ley General de Telecomunicaciones (Decree 94-96); no dedicated online safety or platform-liability law; Cybersecurity Bill (Initiative 6347) pending in Congress as of 2025

Guatemala has no comprehensive online safety law equivalent to the EU Digital Services Act or UK Online Safety Act. The internet is generally accessible without systematic state-level filtering, but regulatory coverage of online platforms is fragmented across older statutes. A proposed Cybersecurity Law (Initiative 6347) received a favourable congressional committee opinion in August 2025 but remains under debate amid free-speech concerns.

Framework: No comprehensive cybersecurity law in force; Initiative 6347 (Ley de Ciberseguridad) pending in Congress; GT-CERT operated informally by the Ministerio de Gobernación

Guatemala lacks a comprehensive, enacted cybersecurity law as of May 2026. A draft Cybersecurity Law (Initiative 6347) received a favorable committee opinion from the Commission on National Security Affairs in August 2025 and was still advancing through congressional plenary debate as of April 2026, with passage delayed by expert concerns over legal gaps and constitutional risks. The only operational cybersecurity body is the GT-CERT under the Ministry of Government, which functions without a statutory mandate.

Framework: Código de Comercio (Decreto 2-70); Ley de Inversión Extranjera (Decreto 9-98); Ley de Fomento de Inversión de Capital Extranjero (Decreto 46-2022); administered by the Registro Mercantil General de la República and the Superintendencia de Administración Tributaria (SAT)

Guatemala permits 100% foreign ownership of locally incorporated companies with no statutory minimum capital requirement, making it broadly open to foreign investors. The most common vehicle is the Sociedad Anónima (S.A.), formed before a Guatemalan notary and registered with the Registro Mercantil; online registration of the mercantile entity alone takes roughly two working days, while the full end-to-end process including notarial deeds and tax enrolment typically runs four to six weeks. Sector-specific licences (environment, health, agriculture) can extend timelines considerably.