Myanmar. Surveillance / law enforcement access. Law

Cybersecurity Law (Myanmar)Cybersecurity Law (2025)

In force
Partly verifiedLow confidence. Enactment month, VPN and licensing details from general knowledge; DLA Piper confirms only existence and incident reporting. [Link: not found – official Myanmar sites unreachable; search budget exhausted]

§1Summary

Synopsis

Military-government law licensing digital platform and cybersecurity service providers, requiring incident reporting and data retention, and restricting VPN use.

Key themes
  • platform licensing
  • incident reporting
  • data retention
  • VPN restrictions
  • content takedown
Unique features

Criminalises unauthorised VPN provision and imposes broad state access powers.

SaaS relevance

Platform providers with large Myanmar user bases may need registration and face retention/access duties.

§2Obligations

Breach notification
Licensed providers report cybersecurity incidents promptly

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
No authoritative text located.
Authority
Ministry of Transport and Communications / Information Technology and Cybersecurity Department

§5Where it applies

Domestic law of
Myanmar

§6Sources and verification

Verification

Low confidence.

Partly verifiedLow confidence. Enactment month, VPN and licensing details from general knowledge; DLA Piper confirms only existence and incident reporting. [Link: not found – official Myanmar sites unreachable; search budget exhausted]