Skip to main content
NOPE
In Effect Law Online Safety Context Relevance

Myanmar Cybersecurity Law

Cybersecurity Law 2025 (Law No. 1/2025)

Myanmar's cybersecurity law requiring platforms with 100,000+ users to register and imposing data retention requirements. Enacted post-2021 coup with uncertain enforcement.

Jurisdiction

Myanmar

MM

Enacted

Jan 1, 2025

Effective

Jul 1, 2025

Enforcement

Ministry of Transport and Communications

Post-coup legal environment - enforcement uncertain

Who Must Comply

This law applies to:

  • • Platforms with 100,000+ Myanmar users
  • • Internet service providers
  • • Online service operators

Capability triggers:

● largeUserBase (required)
● Required ◐ Increases applicability

Who bears obligations:

Operator

Safety Provisions

  • • Platform registration for 100,000+ users
  • • Data retention requirements
  • • Cybersecurity incident reporting
  • • Government access provisions

Enforcement

Enforced by

Ministry of Transport and Communications

Penalties

Fines and potential service blocking

Quick Facts

Binding
Yes
Mental Health Focus
No
Child Safety Focus
No
Algorithmic Scope
No

Why It Matters

Myanmar's registration and data retention requirements create compliance obligations for AI chatbot platforms reaching scale, though post-coup enforcement environment creates operational uncertainty.

Recent Developments

Enacted 2025 post-coup; legal environment uncertain

Cite This

APA

Myanmar. (2025). Cybersecurity Law 2025 (Law No. 1/2025). Retrieved from https://nope.net/regs/mm-cybersecurity-2025

BibTeX

@misc{mm_cybersecurity_2025,
  title = {Cybersecurity Law 2025 (Law No. 1/2025)},
  author = {Myanmar},
  year = {2025},
  url = {https://nope.net/regs/mm-cybersecurity-2025}
}

Related Regulations

In Effect FJ • Online Safety

Fiji OSA

Fiji's online safety law covering cyberbullying, cyberstalking, and revenge porn with Online Safety Commission oversight and mandatory mediation.

In Effect MY • Online Safety

Malaysia OSA

Requires licensed platforms to implement content moderation systems, child-specific safeguards, and submit Online Safety Plans. Nine categories of harmful content regulated.

In Effect AU • Online Safety

AU Online Safety Act

Grants eSafety Commissioner powers to issue removal notices with 24-hour compliance. Basic Online Safety Expectations (BOSE) formalize baseline safety governance requirements.

In Effect BN • Data Protection

Brunei PDPO

Brunei's personal data protection order requiring DPIA and imposing penalties up to 10% Brunei turnover or $1M.

In Effect IN • Data Protection

India DPDP Act

STRICTEST children's provisions in APAC. Children = under 18; verifiable parental consent MANDATORY; PROHIBITION on tracking, behavioral monitoring, targeted advertising to children.

In Effect NP • AI Safety

Nepal AI Policy

Nepal national AI policy establishing governance framework and development priorities. Creates AI Governance Council (chaired by Minister for Communications and IT), AI Regulation Council, National AI Centre, and AI Regulatory Authority. Six pillars including ethics, human resource development, and sectoral application.

Back to all regulations Check if this applies to you