Status
Adopted
Consent model
Opt-in
Primary law
Law 787 on Personal Data Protection
Year
2012
Authority
DIPRODAP (provided by law, never operational)
Marketing consent
Consent-first on paper.
Transfers
Transfers abroad rest mainly on the individual's consent.
Penalties
Penalties are nominal.
The framework
Nicaragua has enacted Law 787 on Personal Data Protection, but the regime is not yet fully operative.
That puts Nicaragua in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law 787 on Personal Data Protection
2012 · Adopted
Law 787 exists on paper but its authority was never stood up, so the framework is effectively dormant.
Marketing and advertising
Consent-first on paper. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfers abroad rest mainly on the individual's consent. Whatever the local mechanism, EU-origin data carries the GDPR's transfer chapter with it into this market.
Enforcement and penalties
Penalties are nominal.
Cite this page: "Nicaragua Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/nicaragua.html. Accessed [date].