On December 24, 2024, the Official Gazette published Decree with Force of Law No. DFL N°1-21.663, dated October 30 of the same year, which establishes the entry into force of Law No. 21.663 Cybersecurity Framework Law and the commencement of activities of the National Cybersecurity Agency (ANCI).

Established deadlines

• Commencement of ANCI activities: January 1, 2025.
• Entry into force of the Cybersecurity Framework Law regulations: January 1, 2025, except for the following provisions, which will come into force on March 1, 2025:
  • Article 5: Qualification of operators of vital importance.
  • Article 8: Specific duties of operators of vital importance.
  • Article 9: Duty to report to the National CSIRT cyberattacks and cybersecurity incidents that may have significant effects.
  • Title VII: Sanctions and infractions regime.

For more details, you can consult the full text of the Decree with Force of Law at the following link: DFL N°1-21.663.

For more information on the main aspects of the Cybersecurity Framework Law, you can consult the following link: News Alert Cybersecurity Framework Law.