Honduras Plans Cybersecurity Law for Congress by End-2026, Regulator Says

Honduras's telecoms regulator César Cáceres anticipates a draft cybersecurity law will be ready for Congress by the end of 2026, according to a report in Tiempo on 1 October. The proposed law intends to fortify the state's capacity to prevent, investigate, and respond to cyber attacks, as part of a national cybersecurity strategy being developed with the International Telecommunication Union (ITU).

Although the draft law and budget for a dedicated cyber attack response center have not been disclosed, Cáceres confirmed the government is actively establishing such a center, known as a Computer Security Incident Response Team (CSIRT). This team would monitor attacks, coordinate responses, and protect critical databases from potential breaches.

The center will focus on safeguarding sensitive information including personal data registers and security-critical infrastructure. However, Cáceres did not specify when the CSIRT would commence operations or provide information on funding or personnel allocation. The regulator also seeks to align Honduras with the Budapest Convention, a 2001 treaty established by the Council of Europe, which outlines international standards for combating cybercrime and facilitating evidence-sharing across borders.

Currently, Honduras has not joined this treaty, a fact Cáceres emphasized as the nation lacks the means to pursue cybercrimes globally. The regulator's initiative aligns with separate efforts by the Honduran Public Ministry and the Supreme Court, who are pushing Congress to revise the country’s cybercrime legal framework. Their aim includes introducing new statutes, prioritizing offenses such as human trafficking and child sexual exploitation via online platforms, and stiffening regulations regarding electronic evidence in legal proceedings.

These initiatives await approval in Honduras's unicameral Congress, where amendments may be introduced. As of now, the plan remains uncodified, and there are no immediate obligations imposed on companies or individuals. Cáceres highlighted phishing as an ongoing threat and stressed the importance of addressing this issue, stressing the need for collaboration with telecom companies.