Myanmar
LimitedElectronic Transactions Law 2004 + Cybersecurity Law 2021 (draft)
Authority: Ministry of Transport and Communications | Enforcement: partial | Enacted: April 2004
Overview
Myanmar does not have a comprehensive data protection law. Some protections exist under the Electronic Transactions Law and the Constitution. A Cybersecurity Law was drafted in 2021 but has faced significant criticism. The regulatory environment is highly uncertain.
14-Topic Coverage
Data Protection Authority
Not AddressedNo dedicated data protection authority.
Consent Requirements
Partially AddressedLimited consent provisions under existing laws.
Data Subject Rights
Partially AddressedConstitutional privacy rights. No comprehensive statutory data subject rights.
Cross-Border Transfer
Not AddressedNo specific cross-border transfer framework.
Breach Notification
Not AddressedNo mandatory breach notification requirement.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedChild rights legislation exists but not specific to data protection.
Penalties & Enforcement
Partially AddressedElectronic Transactions Law penalties for certain offences.
Sector-Specific Rules
Partially AddressedCentral bank telecom-related data provisions.
Cookie/Tracking
Not AddressedNo specific regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Partially AddressedDraft Cybersecurity Law proposes localisation. Status uncertain.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedVarious regulations protect state data.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Myanmar's regulations.
Book a Consultation