Cambodia

Limited

Draft Law on Personal Data Protection + E-Commerce Law 2019

Authority: Ministry of Posts and Telecommunications | Enforcement: partial | Enacted: November 2019

Overview

Cambodia does not yet have a comprehensive data protection law. The E-Commerce Law 2019 provides some data protection provisions. A dedicated Personal Data Protection Law has been drafted. The Ministry of Posts and Telecommunications oversees digital regulation.

14-Topic Coverage

Data Protection Authority

Partially Addressed

Ministry of Posts and Telecommunications has some oversight. No dedicated DP authority.

Data Subject Rights

Partially Addressed

Limited rights under E-Commerce Law. Constitution provides privacy protections.

Cross-Border Transfer

Partially Addressed

Some provisions in E-Commerce Law. Draft law addresses transfers comprehensively.

Breach Notification

Not Addressed

No mandatory breach notification requirement.

DPO Requirements

Not Addressed

No DPO requirement.

Children's Data

Partially Addressed

Child protection laws exist. No specific data protection provisions.

Penalties & Enforcement

Partially Addressed

E-Commerce Law penalties for some violations.

Sector-Specific Rules

Partially Addressed

NBC banking regulations, telecom provisions.

AI & Automated Decisions

Not Addressed

No specific provisions.

Data Localisation

Partially Addressed

Some sector-specific requirements proposed.

Significant Data Fiduciary

Not Addressed

No equivalent concept.

Government Data

Partially Addressed

Various regulations protect government data.