Update on the Federal Cybersecurity Law
After more than 15 months of consensus work, on April 25th the proposed Federal Cybersecurity Law was admitted for processing in the Congress of the Union. This document includes the longstanding request from the telecommunications industry to create a National Agency of Cybersecurity. Among its many functions, this Agency will oversee the national policy on cybersecurity, establish registries, facilitate international cooperation, and develop standards and guidelines.
However, the third transitory article of the initiative grants up to three years as the maximum term to establish this Agency, while the fourth transitory article stipulates a similar timeframe for the creation of a Specialized Cybersecurity Prosecutor's Office, which will operate under the Republic's Attorney General's Office.
The proposed Federal Cybersecurity Law aims to create the National Cybersecurity Agency—a long-desired outcome for the industry that has been advocated for years.
Additionally, it defines critical infrastructure in the context of potential threats to national security. The proposal suggests applying existing laws such as National Security and Telecommunications, where applicable, alongside this new legislation, and it emphasizes establishing a National Cybersecurity Policy with a human rights approach.