Myanmar Cybersecurity Law
Cybersecurity Law 2025 (Law No. 1/2025)
Myanmar's cybersecurity law requiring platforms with 100,000+ users to register and imposing data retention requirements. Enacted post-2021 coup with uncertain enforcement.
Jurisdiction
Myanmar
Enacted
Jan 1, 2025
Effective
Jul 1, 2025
Enforcement
Ministry of Transport and Communications
Post-coup legal environment - enforcement uncertain
DataGuidance Myanmar OverviewWhy It Matters
Myanmar's registration and data retention requirements create compliance obligations for AI chatbot platforms reaching scale, though post-coup enforcement environment creates operational uncertainty.
Recent Developments
Enacted 2025 post-coup; legal environment uncertain
At a Glance
Applies to
Harms addressed
Who Must Comply
- Platforms with 100,000+ Myanmar users
- Internet service providers
- Online service operators
Obligations fall on:
Safety Provisions
- Platform registration for 100,000+ users
- Data retention requirements
- Cybersecurity incident reporting
- Government access provisions
Compliance & Enforcement
Penalties
Fines and potential service blocking
Primary Source
DataGuidance Myanmar Overview
https://www.dataguidance.com/
View on map
Myanmar
Focus Areas
General regulation
Cite This
APA
Myanmar. (2025). Cybersecurity Law 2025 (Law No. 1/2025).
Related Regulations
Fiji OSA
Fiji's online safety law covering cyberbullying, cyberstalking, and revenge porn with Online Safety Commission oversight and mandatory mediation.
Japan Revenge Porn Act
Japan's revenge porn law criminalizing distribution of private sexual images (3 years/¥500,000) but does NOT cover deepfakes - significant legal gap.
Malaysia OSA
Requires licensed platforms to implement content moderation systems, child-specific safeguards, and submit Online Safety Plans. Nine categories of harmful content regulated.
NZ Online Safety Bill
Would bar under-16s from holding accounts on age-restricted platforms, require age assurance beyond self-declared dates of birth, and require operators to conduct and report on child safety risk assessments for users under 18. Expressly brings AI companion platforms within scope.
KR AI Ethics Principles
Government-wide AI ethics principles issued under Article 27 of Korea's AI Framework Act, setting three core values and seven principles applying across the AI lifecycle. Non-binding, addressed to AI suppliers, users, and government.
Brunei PDPO
Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.
Last updated January 22, 2026. Verify against primary sources before relying on this information.