Cambodia. Comprehensive data protection. Draft law

Draft PDP Law (Cambodia)Draft Law on Personal Data Protection

Bill/proposed
Partly verifiedMedium confidence. Included despite not passing a chamber, because formally circulated by government; treat as watchlist. [Link: draft – no official text]

§1Summary

Synopsis

Draft comprehensive law circulated by the MPTC with GDPR-style principles, controller/processor definitions and expected breach notification. Not yet adopted.

Key themes
  • consent
  • principles
  • controller/processor
  • breach notification
Unique features

Cambodia currently relies on the Constitution, Civil/Criminal Codes and the E-Commerce Law.

SaaS relevance

No general law yet; E-Commerce Law security duties apply to online service providers.

§2Dates

Key dates
  • MPTC announced 2021; latest consultation July 2025

§3Text and authority

Text
No authoritative text located.
Authority
Ministry of Post and Telecommunications (MPTC)

§4Where it applies

Domestic law of
Cambodia

§5Sources and verification

Verification

Medium confidence.

Partly verifiedMedium confidence. Included despite not passing a chamber, because formally circulated by government; treat as watchlist. [Link: draft – no official text]