Nicaragua: technology regulation at a glance

Framework: Law No. 1072 (2021) amending Law No. 977 (AML/CFT); BCN Resolution CD-BCN-XXV-1-22 (April 2022) as amended by CD-BCN-XLIX-3-23 (August 2023); Administrative Resolution GG-08-MAYO-2025-LASMF-DO (May 2025); supervised by Banco Central de Nicaragua (BCN)

Nicaragua operates a mandatory BCN-licensing regime for virtual asset service providers (VASPs / PSAVs), established by Law No. 1072 (2021) and implemented through BCN Resolution CD-BCN-XXV-1-22 (2022). The framework was substantially upgraded in May 2025 via Administrative Resolution GG-08-MAYO-2025-LASMF-DO, adding Travel Rule compliance, blockchain-monitoring obligations, cold-storage custody standards, and proof-of-reserves requirements. Crypto is legal to hold and trade; no blanket ban or prohibition exists, and all commercial VASP activity is subject to BCN authorisation and ongoing supervision.

Framework: No dedicated AI law or regulator. The only AI-specific official instruments are voluntary 'Cartillas para el Uso Responsable y Ético de la Inteligencia Artificial' (ethical-use guides) issued by the education authorities (MINED/INATEC/SETEC) in March 2026; general laws such as Ley 787 (Personal Data Protection) and Ley 1042 (Special Cybercrimes Law) apply indirectly.

As of May 2026, Nicaragua has not enacted any comprehensive or sectoral AI legislation, nor adopted a binding national AI strategy. Government action is limited to voluntary ethical-use guidelines for AI in education (cartillas launched March 2026 under the 'Bendiciones y Victorias' education strategy), while general data-protection and cybercrime laws provide indirect, non-AI-specific coverage. Regional legal analyses consistently group Nicaragua among Central American states with no AI-specific regulatory material.

Framework: Law No. 787, Personal Data Protection Law (2012) and its implementing Decree No. 36-2012; supervisory authority: Directorate for the Protection of Personal Data (DIPRODAP) under the Ministry of Finance and Public Credit (not yet operationally constituted)

Nicaragua enacted a comprehensive personal data protection statute, Law No. 787, on 29 March 2012, covering both automated and manual processing of personal data by public and private entities. The law grants data subjects rights of access, rectification, erasure, and objection, and mandates principles of legality, purpose limitation, proportionality, security, and confidentiality. Despite the law being in force for over a decade, the designated supervisory authority (DIPRODAP) has never been formally constituted, leaving the regime effectively unenforced in practice.

Framework: Central Bank of Nicaragua (BCN) regulations for Financial Technology Payment Service Providers (PSP) and Virtual Asset Service Providers (PSAV), current framework adopted by Resolution CDMF-XIII-2-251 (23 May 2025), which repealed the original 2022 Resolution CD-BCN-XXV-1-22; instant-payment rails (SINPE/TEF) also operated by the BCN.

Nicaragua has a dedicated, in-force licensing regime for digital payments and virtual assets administered by the Banco Central de Nicaragua (BCN). It is set out in central-bank regulation (not a stand-alone 'fintech law'): only entities holding a BCN license or registration may operate as payment service providers (PSP) or virtual asset service providers (PSAV), with minimum-capital, governance and supervisory requirements. A 2025 overhaul replaced the original 2022 rules and added remittance/currency-exchange categories; there is no specific open-banking or BNPL framework.

Framework: Ley No. 761 (Ley General de Migración y Extranjería) administered by the Dirección General de Migración y Extranjería (DGME); residency-by-income via Ley No. 694 (Ley de Promoción de Ingreso de Residentes Pensionados y Residentes Rentistas).

Nicaragua has no dedicated digital-nomad or remote-work visa. Remote workers and relocators must use existing migration categories under Law 761 and Law 694, chiefly the pensionado (pensioner), rentista (fixed-income) and investor residency routes, or stay short-term as tourists. Foreign nationals generally enter visa-free or on a tourist entry valid up to 90 days, which does not authorize local employment.

Framework: Special Cybercrime Law (Ley 1042, 2020; reformed by Ley 1219, 2024) plus the new General Law on Convergent Telecommunications (Ley 1223, in force 6 Nov 2025), administered/enforced by the regulator TELCOR, courts, and the Ortega-Murillo government.

Nicaragua does not have a rights-protective online-safety regime; instead the state operates a heavy-restriction model in which online expression is criminalized and telecom/internet infrastructure is being placed under centralized government surveillance. The 2020 Cybercrime Law ('Ley Mordaza'/gag law) punishes vaguely defined 'false' or 'alarming' information with prison, while the 2025 telecommunications law (Ley 1223, the 'new gag law') grants regulator TELCOR broad powers and data-access/retention obligations over operators. Freedom House rates Nicaragua's internet 'Not Free.'

Framework: No comprehensive NIS2-style cybersecurity-obligations law. Cyber matters are governed by a mix: the criminal Ley Especial de Ciberdelitos (Law 1042/2020, reformed by Law 1219/2024), the policy-level National Cybersecurity Strategy 2020-2025 (Decree 24-2020), and binding sector rules, notably the SIBOIF Norma sobre Gestión de Riesgo Tecnológico for supervised financial institutions.

Nicaragua has no single horizontal cybersecurity law imposing NIS2-style security and incident-reporting duties on operators of essential services. Instead, obligations are sectoral and fragmented: financial institutions face binding IT-risk-management rules from the banking supervisor (SIBOIF), while at national level a 2020 criminal cybercrimes law and a 2020-2025 strategy (which only contemplates a future incident-response capability) set the broader policy. There is no general, cross-sector breach-notification mandate for the public or affected individuals.

Framework: Foreign Investment Law No. 1240 (in force 24 May 2025, replacing Law No. 344) administered by MIFIC; company incorporation under the Commercial Code via the Investment One-Stop Shop (Ventanilla Única de Inversiones, VUI), with registration at the Public Mercantile Registry (CSJ), the Tax Directorate (DGI) and the municipality.

Nicaragua permits 100% foreign ownership across virtually all sectors and grants foreign investors national (equal) treatment, profit/capital repatriation rights and property protection under Law No. 1240 (2025). Company formation is centralized through the VUI one-stop shop, but it still requires a notarized deed, at least two shareholders, a locally-resident legal representative, and several sequential registrations, making the full process moderately involved (typically a few weeks rather than days).