NicaraguaLey No. 1042, unauthorized access to computer systems
Ley No. 1042, 27-Oct-2020, arts. 4-5
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Publisher's page: http://legislacion.asamblea.gob.ni/normaweb.nsf/($All)/803E7C7FBCF44D7706258611007C6D87In force since .
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not access, intercept, or use a computer system without authorization or in excess of the authorization granted.
- Reading a public, unauthenticated page without defeating any access control has not itself been held to violate this article.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Private right of actionNo
Criminal exposure note
Article 4: imprisonment of one to three years and 200 to 500 day-fines. Article 5: imprisonment of two to four years and 300 to 500 day-fines. Both increase by a third at their upper and lower limits for a commercial-purpose offense or one directed at a public office or a regulated financial entity (art. 4-5, common paragraph).
What it makes you log
Logging duty
Los articulos 4 y 5 tipifican el acceso indebido a sistemas informaticos y a programas o datos informaticos; no imponen deber alguno de crear, conservar, exhibir o revisar un registro. In English: articles 4 and 5 define the offences of improper access to computer systems and to programs or data, and impose no duty to create, keep, produce or review a log or record. Article 2 applies the Act to offences committed within or outside the national territory without naming a presence or effects test, so no hook value is set.
- Kind
- None
- As of
What this law does
Article 4 punishes a person who intentionally and without authorization, or in excess of the authorization granted, accesses, intercepts, or partially or wholly uses a computer system, with imprisonment of one to three years and 200 to 500 day-fines.
Article 5 punishes accessing a program or stored data with intent to appropriate it or to commit another offense with it, with imprisonment of two to four years and 300 to 500 day-fines; both penalties increase by a third at their upper and lower limits when committed for commercial purposes or against a public office or a bank, microfinance institution, or other regulated financial entity. Neither article was among those Ley No. 1219 of 2024 reformed.
Article 47 of Ley No. 1042 repealed articles 192, 193, 194, 198, 245, and 246 of the prior Ley No. 641, Codigo Penal (2007), which had held Nicaragua's computer-offense provisions before this Act.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .