Central Bank of Paraguay approves payment service provider rules on registration transparency and information security

The Central Bank of Paraguay has approved a new regulation for payment service providers in the National Payments System, setting out their roles, obligations and operating requirements. The framework covers mandatory registration with the central bank, disclosure standards for fees and service terms, minimum information security and cybersecurity controls, and requirements for the administration and protection of funds handled in payment services. The regulation was issued under powers granted by Law No. 7503/2025 on the National Payments System. It requires payment service providers to register with the Central Bank of Paraguay under guidelines to be defined by the bank’s General Management, with the aim of maintaining updated, verifiable and consistent information on payment ecosystem participants. On transparency, providers must publish and communicate in a clear, accessible and comparable way information on commissions, costs, service conditions, and complaint handling and resolution mechanisms for merchants and users. On information security and cybersecurity, the rules establish minimum standards for controls, protection and risk management based on the type of service provided and the level of risk.