Laos. Comprehensive data protection. Law
EDP Law (Laos)Law on Electronic Data Protection (No. 25/NA)
In force
Partly verified
Medium confidence.Law number and adoption date from general knowledge. [Link: official Lao (Lao Official Gazette; PDF /kcfinder/upload/files/0918570.pdf); no English found]
§1Summary
- Synopsis
Governs collection, use and transfer of electronic data, requiring the information owner's consent for collection, sensitive data and transfers, including transfers out of Laos.
- Key themes
- Unique features
No mandatory breach notification; consent for any data leaving Laos.
- SaaS relevance
SaaS collecting data of Lao users needs consent for export.
§2Obligations
- Breach notification
- None
- Cross-border transfers
- Information owner consent
- Maximum penalty
- Penal Code: 3–6 months and LAK 3m–10m for confidential disclosure
§3Dates
- Key dates
- Adopted
- In force
- Implementing Instructions 2018
§4Text and authority
- Text
- Authoritative text laoofficialgazette.gov.la
- Authority
- Ministry of Technology and Communications (MTC)
§5Where it applies
- Domestic law of
- Laos
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.Law number and adoption date from general knowledge. [Link: official Lao (Lao Official Gazette; PDF /kcfinder/upload/files/0918570.pdf); no English found]