Liechtenstein: technology regulation at a glance

Framework: Token and Trusted Technology Service Provider Act (TVTG / Blockchain Act, in force since 1 Jan 2020) + EEA MiCA Implementation Act (EWR-MiCA-DG, in force since 1 Feb 2025), supervised by the Financial Market Authority Liechtenstein (FMA)

Crypto-assets are fully legal and comprehensively regulated in Liechtenstein. The country operates a dual regime: the TVTG (Blockchain Act) provides the civil-law 'Token Container Model' and licenses 'Trusted Technology (TT) Service Providers' for areas outside EU scope (e.g. NFTs, civil-law aspects), while the EU's MiCA Regulation has been transposed into Liechtenstein law since 1 February 2025 and governs all harmonised crypto-asset activities, with the TVTG-to-MiCA transitional grandfathering period ending on 1 July 2026.

Framework: No dedicated AI law in force. Governance rests on (1) a non-binding 'KI-Strategie der Liechtensteinischen Landesverwaltung' adopted by the Government on 14 April 2026 for public-sector AI use; (2) GDPR-based guidance from the Datenschutzstelle (DSS) data protection authority; (3) the Council of Europe Framework Convention on AI (signed 27 Feb 2025, Strasbourg); and (4) pending incorporation of the EU AI Act into the EEA Agreement (currently 'under EFTA scrutiny'). The Office for Digital Innovation (Stabsstelle für digitale Innovation, SDI) at llv.li coordinates adoption/implementation of EU digital legislation.

Liechtenstein has no comprehensive AI law yet. As an EEA EFTA state it is expected to be bound by the EU AI Act once it is incorporated into the EEA Agreement (the regulation is marked EEA-relevant and a draft Joint Committee Decision is pending), and it participates in EU AI Board meetings as an observer. Current domestic governance is a non-binding national AI strategy for the public administration (adopted April 2026), GDPR-based guidance from the DSS on AI chatbots and public cloud AI tools, and the signed Council of Europe Framework Convention on AI.

Framework: GDPR (Regulation (EU) 2016/679) directly applicable via EEA Joint Committee Decision No 154/2018, complemented nationally by the Data Protection Act (Datenschutzgesetz – DSG) of 4 October 2018 and the Data Protection Ordinance (Datenschutzverordnung – DSV) of 11 December 2018; supervised by the Datenschutzstelle (DSS).

Liechtenstein has a comprehensive GDPR-equivalent data-protection regime. The EU GDPR was incorporated into the EEA Agreement by Joint Committee Decision No 154/2018 and became directly applicable in Liechtenstein on 20 July 2018, while the national Data Protection Act (DSG) and Ordinance (DSV) — both in force since 1 January 2019 — exercise GDPR's opening clauses for areas such as employment, public-sector processing, video surveillance, journalism and criminal data. The Datenschutzstelle (DSS), based in Vaduz, is the independent supervisory authority and a full (non-voting) EDPB member.

Framework: Payment Services Act (Zahlungsdienstegesetz, ZDG) and Payment Services Ordinance (ZDV) transposing PSD2 (in force 1 October 2019); E-Money Act and E-Money Ordinance transposing EMD2; Token and Trusted Technology Service Provider Act (TVTG, in force 1 January 2020); EEA-MiCA Implementation Act (EWR-MiCA-DG) applying Regulation (EU) 2023/1114; all supervised by the Financial Market Authority (FMA) Liechtenstein.

Liechtenstein operates a mature, EEA-aligned licensing regime for digital payments and fintech. Payment institutions, e-money institutions, PISPs and AISPs are authorised and supervised by the FMA under the ZDG/ZDV (PSD2 transposition) and the E-Money Act, with EEA passporting rights; alongside this, the TVTG (2020) was the world's first comprehensive blockchain/token-service law, and MiCAR is now fully applicable with a 1 July 2026 end to transitional relief for existing CASPs.

Framework: Foreign Nationals Act (Ausländergesetz, AuG) and the Ordinance on the Movement of Persons (PFZV) for EEA/Swiss nationals, administered by the Migration and Passport Office (Ausländer- und Passamt). No dedicated digital-nomad visa exists; remote workers must fit the general residence framework.

Liechtenstein does not publish a dedicated digital-nomad or remote-work visa. Remote workers can, in theory, use the general 'Residence Permit B without gainful employment' route, but residence permits are tightly rationed: EEA/Swiss nationals compete in a biannual lottery for roughly 8 non-employment B permits per year, while non-EEA nationals must apply directly and are only approved in exceptional cases (national interest, significant means). There is no golden visa or residency-by-investment programme.

Framework: EU E-Commerce Directive 2000/31/EC transposed via the E-Commerce Act (ECG, 2003) and the Audiovisual Media Services regime under the Media Act (Mediengesetz, 2005) / Communications Act (KomG, 2006), supervised by the Office for Communications (Amt für Kommunikation, AK); the comprehensive EU Digital Services Act (Reg (EU) 2022/2065) is EEA-relevant but not yet incorporated into the EEA Agreement, so not yet in force for Liechtenstein.

As an EEA EFTA state, Liechtenstein currently regulates online intermediaries through its E-Commerce Act (modelled on the EU E-Commerce Directive), which sets conditional platform/intermediary liability safe harbours and notice-based removal of illegal content, alongside audiovisual-media and protection-of-minors rules enforced by the Office for Communications. The EU Digital Services Act, the comprehensive online-safety regime, is marked EEA-relevant and under scrutiny for incorporation by Iceland, Liechtenstein and Norway, but the EEA Joint Committee decision has not yet brought it into force; until then no single comprehensive online-safety statute applies. There is no heavy state restriction or censorship of the internet.

Framework: Cyber-Sicherheitsgesetz (CSG, LGBl. 784.13) and Cyber-Sicherheitsverordnung (CSV), in force since 1 February 2025, transposing EU NIS2 Directive (EU) 2022/2555 into Liechtenstein law. Supervised by the Stabsstelle Cyber-Sicherheit (National Cyber Security Unit).

Liechtenstein has a comprehensive, horizontal cybersecurity regime. The fully revised Cyber Security Act (CSG) and its implementing regulation (CSV) entered into force on 1 February 2025, transposing the EU NIS2 Directive into national law under the EEA Agreement. The Stabsstelle Cyber-Sicherheit is the competent authority; sector-specific overlays apply, notably DORA for financial entities supervised by the FMA (also effective 1 February 2025).

Framework: Liechtenstein Persons and Companies Act (PGR) governs legal entities; the Trade Act (Gewerbegesetz) governs business licensing, administered by the Office of Economic Affairs (Amt für Volkswirtschaft) and the Commercial Register (Handelsregister).

Liechtenstein permits 100% foreign ownership of companies with no nationality or residency restrictions on shareholders, and incorporation of a GmbH or AG is typically completed within about one to two weeks via a notary. However, operating a business is gated by a separate trade-licence regime: a resident, German-speaking managing director is required, qualified trades need a Gewerbebewilligung, and third-country nationals must have resided in Liechtenstein for at least 12 years to obtain a licence in their own name, while EEA/EFTA nationals face easier conditions.