Cambodia

Introduction Cambodia is developing its data protection framework to align with international standards while addressing local needs. This post examines the current legal landscape. Current Regulations Law on E-Commerce (2019): Contains provisions on data protection Sub-Decree on Data Protection (Draft): Expected to be enacted in 2025 Sector-Specific Rules: Banking and telecom regulations with data provisions Key Requirements Consent: Obtaining clear user consent for data processing Purpose Limitation: Using data only for specified purposes Data Localization: Requirements for certain types of data Compliance Challenges Lack of comprehensive standalone data protection law Limited awareness among local businesses Enforcement mechanisms still developing Recommendations Conduct data mapping and inventory Implement privacy-by-design principles Prepare for upcoming regulations Appoint data protection officers where needed Conclusion While Cambodia’s data protection regime is evolving, businesses should proactively adopt best practices to ensure compliance. ...

Introduction Cambodia’s rapid digital transformation has brought both opportunities and cybersecurity challenges. As internet penetration grows to over 50% of the population and mobile money services expand, the attack surface for cyber threats has increased significantly. Current Threats Phishing Attacks: Targeting banking and financial services Ransomware: Affecting SMEs with limited security budgets Data Breaches: From inadequately secured government and business systems Regulatory Framework Cambodia’s draft Cybersecurity Law (expected 2025) ASEAN Cybersecurity Cooperation Strategy National Internet Gateway implications Recommendations Public-private partnerships for threat intelligence sharing Capacity building through cybersecurity education Adoption of international security standards Conclusion While challenges remain, Cambodia’s growing tech sector presents opportunities to build a more secure digital ecosystem from the ground up. ...