Eritrea: technology regulation at a glance

Framework: No crypto-specific legal framework exists. The Bank of Eritrea (BoE) governs all financial activity under general banking law; no virtual-asset or digital-asset legislation has been enacted.

Eritrea has enacted no cryptocurrency or digital-asset legislation of any kind. The banking system is entirely state-controlled, more than 70% of citizens are unbanked, and digital financial infrastructure is almost non-existent. Crypto neither has explicit legal standing nor is it formally banned; it exists in a complete regulatory vacuum, and international exchanges and ICO platforms broadly restrict Eritrean users due to the country's international sanctions exposure and absence of an AML/VASP framework.

Framework: No AI-specific law, strategy, or regulatory framework; digital governance limited to the 1998 Communications Proclamation and the 2003 Eritrean Telecommunications Services Corporation (EriTel) Proclamation

Eritrea has no national AI law, strategy, voluntary guidelines, or proposed AI legislation as of mid-2026. The country's digital governance rests solely on basic telecommunications statutes from the late 1990s and early 2000s, with no data protection or algorithmic accountability instruments in place. Eritrea ranks near the bottom of the Oxford Insights Government AI Readiness Index, and while it is an African Union member state nominally covered by the AU's 2024 Continental AI Strategy, no national implementation plan has been published.

Framework: No data protection law exists; the sole relevant protection is Article 18 of the 1997 Constitution (general right to privacy). No dedicated supervisory authority.

Eritrea has no comprehensive, sector-specific, or proposed personal data-protection legislation as of May 2026. The 1997 Constitution's Article 18 guarantees a general right to privacy and inviolability of communications, but no statute operationalises data-protection rights or obligations. UNCTAD's Global Cyberlaw Tracker lists Eritrea among the small group of countries that lack even a draft data-protection bill.

Framework: Bank of Eritrea Proclamation No. 93/1997; ad-hoc payment operator authorization by Bank of Eritrea; no dedicated Payment Services or EMI Act

Eritrea has no dedicated payment institution or e-money licensing regime; the Bank of Eritrea (established under Proclamation 93/1997) exercises general supervisory authority over all payment-related activity, including ad-hoc authorization of the sole licensed mobile payment operator, M-Nakfa. Open banking, instant-payment rails, and BNPL rules are entirely absent, and the financial sector remains highly centralized under state-owned institutions with severe foreign-exchange restrictions.

Framework: Eritrean immigration administered by Eritrean diplomatic missions (embassies/consulates) under government authority; visa categories include tourist, business, and work (employer-sponsored); no dedicated remote-work or long-stay self-employment category exists. Nationality governed by the Eritrean Nationality Proclamation.

Eritrea offers no dedicated digital nomad or remote-work visa, and no freelance/self-employed long-stay route. The only available entry path for most foreigners is a short-stay tourist visa (typically 30 days, extendable in Asmara), while a work visa requires a letter of sponsorship from an Eritrean-based employer, explicitly excluding independent contractors or those working for foreign clients. No golden visa or residency-by-investment program exists.

Framework: State telecommunications monopoly via Eritrean Telecommunication Services Corporation (EriTel) under Proclamation No. 134/2003; content oversight by Ministry of Information under Press Proclamation and executive decree; no independent regulator exists

Eritrea operates one of the most restrictive internet environments in the world, with all telecommunications controlled exclusively by the state-owned EriTel monopoly. Mobile internet is effectively blocked for ordinary citizens, social media platforms and diaspora news sites are blocked, and the Ministry of Information exercises total authority over online content through executive decree and national-security provisions rather than a formal legislative framework. No online safety, platform-liability, or content-moderation law comparable to the EU DSA or UK OSA exists; restriction is achieved primarily through infrastructure ownership and state monopoly control.

Framework: Communications Proclamation No. 102/1998; Eritrean Telecommunications Services Corporation Proclamation No. 134/2003; reported Cybercrime Proclamation No. 125/2019, no comprehensive cybersecurity law or data protection statute

Eritrea has no comprehensive cybersecurity law, no data protection legislation, and no published national cybersecurity strategy. Its cybersecurity-relevant legal instruments are limited to older telecommunications statutes governing the state-controlled telecom monopoly and a reported (but officially unverified) 2019 cybercrime proclamation. Eritrea is not party to the Budapest Convention or the AU Malabo Convention on Cyber Security, and no sector-specific breach-notification or incident-reporting obligations have been identified.

Framework: Investment Proclamation No. 59/1994 and amendments; Ministry of Trade, Industry and Tourism; Eritrea Investment Center (under Ministry of Finance)

Eritrea is among the most difficult countries in the world to start a business, ranked 189 out of 190 economies on the World Bank Ease of Doing Business index. The investment environment is severely constrained by U.S. economic sanctions, a non-convertible national currency (Nakfa), and pervasive state and ruling-party (PFDJ) control over businesses of any significant scale. Business license issuance was suspended for over four years before partially resuming in August 2024 on a limited basis.