Argentina: technology regulation at a glance

Framework: Law No. 27,739 (March 2024) — defines Virtual Assets and Virtual Asset Service Providers (PSAV), amends AML Law No. 25,246 and designates the Comisión Nacional de Valores (CNV) as the PSAV registrar/supervisor — implemented by CNV General Resolutions No. 994/2024 and No. 1058/2025 (PSAV conduct/prudential rules), and No. 1069/2025, 1081/2025 and 1087/2025 (tokenization framework). AML/CFT supervision by the Unidad de Información Financiera (UIF); tax administration by ARCA (former AFIP); BCRA still restricts banks from directly offering crypto services (rule under review for 2026).

Crypto is legal in Argentina and now covered by a live, sector-specific regime. Law 27,739 (2024) placed virtual assets and PSAVs under the CNV and the AML framework; CNV Resolution 1058/2025 fleshed out registration, custody, cybersecurity, capital and consumer-protection duties, with the transitional deadlines to fully conform running through July–September 2025 and Chapter III obligations becoming exigible from 31 December 2025. Crypto is not legal tender, banks cannot yet directly offer crypto services (the BCRA is expected to lift that restriction in 2026), and gains are taxable under the Income Tax and Personal Assets Tax regimes administered by ARCA.

Framework: No comprehensive federal AI statute. Governance rests on the 2019 Plan Nacional de Inteligencia Artificial (ArgenIA), non-binding federal guidelines (Disposición 2/2023 'Recomendaciones para una IA Fiable'; AAIP Resolución 161/2023), a 2025 provincial framework (Buenos Aires Res. 9/2025) and general laws (data protection Law 25.326, consumer, IP). A May 2026 executive bill on 'non-human corporations' and unregulated AI is pending in Congress.

Argentina has no horizontal AI law in force. It relies on soft-law federal guidelines, a national AI strategy (ArgenIA 2019), sector- and data-protection-based supervision by the AAIP, and — since late 2025 — the first binding provincial regime in Buenos Aires for AI use in public administration. In May 2026 President Milei sent Congress a bill proposing an explicitly deregulatory AI framework alongside a new 'non-human corporation' category; it remains a draft.

Framework: Personal Data Protection Act (Ley 25.326 de Protección de los Datos Personales, 2000) and Regulatory Decree 1558/2001, enforced by the Agencia de Acceso a la Información Pública (AAIP). Argentina is also party to Council of Europe Convention 108 and Convention 108+.

Argentina has an in-force, omnibus personal-data protection regime built around Law 25.326 (2000), enforced by the AAIP, and holds a European Commission adequacy decision (most recently reconfirmed in January 2024). The framework predates GDPR-era concepts, so several reform bills (notably S-0644/2025 and 1948-D-2025) are pending in Congress to modernize it, but none has been enacted and Law 25.326 remains the operative law.

Framework: Banco Central de la República Argentina (BCRA) framework for Proveedores de Servicios de Pago (PSPs), anchored on Communication 'A' 6885/2019 and successive amendments (including 'A' 8398/2026 on cybersecurity and 'A' 8432/2026 on PSP-as-a-Service), plus Executive Decree 353/2025 creating the Sistema de Finanzas Abiertas (Open Finance). No single 'Ley Fintech' — sectoral regime split among BCRA, CNV, UIF and PDPA.

Argentina has a functioning, sector-specific licensing/registration regime for digital payments run by the BCRA: any entity acting as a Payment Service Provider (payment-account provider, aggregator, acquirer, payment initiator, or the new 'PSP-as-a-Service') must enrol in the BCRA's PSP Registry and comply with prudential, safeguarding, AML and cybersecurity rules. There is no single omnibus 'Fintech Law'; the framework is a multi-agency patchwork (BCRA for payments/FX, CNV for capital-markets/crypto, UIF for AML). Transferencias 3.0 provides a mandatory interoperable instant-payments rail, while open finance and BNPL-specific rules are still being built out.

Framework: Ley de Migraciones 25.871 and Dirección Nacional de Migraciones (DNM) Disposición 758/2022, which created the 'Nómada Digital' transitory residence category, alongside the Rentista, Pensionado and Inversor temporary residence categories.

Argentina has a dedicated digital-nomad visa in force since May 2022, granting a transitory residence of up to 180 days (renewable once, up to ~1 year) to nationals of visa-exempt countries who work remotely for foreign employers or clients. Longer-term relocators typically use the Rentista (passive income), Pensionado (pension) or Inversor (investment) temporary residence routes under Law 25.871, all of which can lead to permanent residence and citizenship. Following Decree 366/2025, requirements were tightened, most notably naturalization now demands two years of uninterrupted physical presence.

Framework: No dedicated omnibus online-safety statute; regulation is a patchwork combining Supreme Court intermediary-liability doctrine (Rodríguez v. Google, 2014), the 'Mica Ortega' Law 27,590 on grooming (2020, reg. Decree 407/2022), 'Ley Olimpia' Law 27,736 on digital gender-based violence (2023), the grooming criminal offense in Art. 131 Penal Code (Law 26,904), Personal Data Protection Law 25,326, and sector oversight by ENACOM. Several comprehensive online-safety/age-verification bills are pending in Congress.

Argentina does not have a comprehensive online-safety or platform-liability law comparable to the EU DSA or UK OSA. Intermediary liability is governed by the 2014 Supreme Court 'Belén Rodríguez' doctrine (platforms are not strictly liable for third-party content and must remove clearly illicit content on notice, with judicial notice generally required in doubtful cases), supplemented by targeted statutes on grooming (Mica Ortega Law) and digital gender-based violence (Ley Olimpia). Multiple 2024–2025 bills on content takedown, digital identity protection, and age verification/mental health in digital environments remain under debate; Freedom House rates the country 'partly free' online.

Framework: Sectoral patchwork anchored by Decree 941/2025 (Centro Nacional de Ciberseguridad — CNC) for public-sector cyber policy, BCRA Communication 'A' 8280 for the financial sector, ENACOM rules for telecoms, Resolution 580/2011 (Critical Information Infrastructure Program), Ley 26.388 (Cybercrime), and Ley 25.326 (Personal Data Protection). Overarching direction is set by the Second National Cybersecurity Strategy (Resolution 44/2023) and the Federal Plan for the Prevention of Cybercrime and Strategic Management of Cybersecurity (2025–2027).

Argentina does not yet have a single comprehensive NIS2-style cybersecurity law. Instead, obligations arise through sector-specific regulation — most prominently BCRA rules for banks and payment providers, and CNC Disposición 1/2026 setting technical requirements for the National Public Sector — layered on top of the 2008 cybercrime statute, the 2000 data-protection law (which still lacks a statutory breach-notification duty), and the Second National Cybersecurity Strategy approved in 2023. A new coordinating authority, the Centro Nacional de Ciberseguridad, was created by DNU 941/2025 (published 2 January 2026) and is progressively issuing binding technical rules.

Framework: Ley General de Sociedades 19.550 (SRL, S.A.) and Ley 27.349/2017 (Sociedad por Acciones Simplificada — SAS); registrations administered by the Inspección General de Justicia (IGJ) in the City of Buenos Aires and provincial public registries elsewhere; tax registration (CUIT) with ARCA (former AFIP). Foreign investment governed by Law 21.382 (Foreign Investment Law) with equal-treatment guarantees; large projects can opt into the RIGI regime under Law 27.742/2024.

Argentina permits 100% foreign ownership of companies in most sectors and offers a fully digital SAS vehicle that can be incorporated in as little as 24–72 hours (typically 1–4 weeks in practice) with minimal capital (two monthly minimum wages). However, foreigners still need to obtain a local tax ID (CUIT or CDI from ARCA), engage a local representative for the appointed foreign directors, and comply with multi-agency filings (IGJ, ARCA, provincial revenue, municipal), so real-world setup is materially harder than the headline timeline suggests. Sectoral restrictions apply to media, aviation, rural land and border/security zones.