Pending National Internet Gateway framework creates centralized internet traffic inspection concerns. Receiving regional technical assistance for DEFA compliance.
Key national laws and regulations governing data privacy, cybersecurity, and tech operations in Cambodia — with direct links to primary legal texts.
| Legislation & Statute | Official Text |
|---|---|
E-Commerce Law 2019 Governs electronic transactions, contracts, and digital signatures. Chapter 6 contains baseline data protection provisions for consumers in commercial digital transactions. Data Governance & E-Commerce | View Statute |
Sub-Decree on National Internet Gateway (NIG) Decree requiring all domestic internet traffic and international connections to route through a state-controlled gateway. Postponed following international and civil society pushback. Traffic Routing & State Surveillance | View Statute |
Law on Consumer Protection 2019 Prohibits deceptive business practices and unfair terms in standard consumer contracts, applying to both physical retail and digital commerce platforms. Consumer Safeguards | View Statute |
Evaluating the economic gains of digital trade alignment against regulatory sovereignty and domestic policy space for Cambodia.
Conditional net benefit requiring extensive special and differential treatment to prevent domestic MSME marginalization and sovereign routing disputes.
Cambodia achieves strong gains in remittance and payment efficiency, but must secure multi-year transition periods under DEFA to build regulatory capacity and prevent local digital market capture.
DEFA Chapter 4 multilateralizes the National Bank of Cambodia's Bakong blockchain system, slashing remittance costs for migrant workers in Thailand and Vietnam.
Automating transit customs under the ASEAN Single Window reduces border clearance delays for garment, footwear, and travel goods exports.
DEFA accession unlocks donor funding and developmental flexibilities from advanced partners to construct missing consumer and cybersecurity baselines.
The deferred National Internet Gateway Sub-Decree (mandating centralized state traffic routing) directly conflicts with DEFA and RCEP open transfer principles.
Prohibiting digital customs duties and foreign merchant establishment requirements leaves nascent local digital vendors vulnerable to Chinese and ASEAN platforms.
Lacking a comprehensive data protection statute or independent supervisory authority, Cambodia faces heavy administrative costs to meet regional trust baselines.
How Cambodia's domestic laws align or conflict with 5 major digital trade agreements (DEFA, RCEP, CPTPP, IPEF, and Bilaterals).
Comparing international trade agreements against national laws and digital rights in Cambodia.
Participating in trade secret protections while retaining regulatory audit discretion.
Protects proprietary algorithmic assets against arbitrary state appropriation.
Subject to ministerial investigation powers in consumer protection and criminal probes.
Preserves state discovery authority, but lacks transparent due process safeguards for proprietary audits.
Participating in notice-and-takedown safe harbor harmonization across regional platforms.
Establishes legal certainty for digital intermediaries hosting user-generated content.
Harmonized with domestic copyright statutes and sectoral telecommunications regulations.
Safeguards conduits from arbitrary intermediary liability, supporting open internet communications.
Standard TRIPS baseline patent protection with compulsory licensing flexibilities.
Standard intellectual property protections aligned with WTO TRIPS baselines.
Preserves domestic authority to issue compulsory licenses during public health crises.
Protects sovereign public health flexibility to manufacture and import affordable generic medicine.
Endorsed ASEAN Guide on AI Ethics; developing national non-binding advisory circulars.
Chapter establishes voluntary safety baselines, ethical governance, and sandbox collaboration.
Domestic binding legislation remains absent; circulars provide non-enforceable guidance.
Zero statutory protection against automated bias, algorithmic worker dispatch, or deceptive AI.
Preserving E-Commerce Law consumer safeguards while National Internet Gateway remains deferred.
Facilitates seamless regional commercial data transfers subject to accountability principles.
Latent tension between DEFA open transfers and deferred National Internet Gateway Sub-Decree No. 23.
Absence of a dedicated horizontal privacy law leaves citizen data without statutory redress.
Statutory risk levels are determined strictly by enacted domestic legislation, multilateral treaty commitments, and procedural safeguards rather than arbitrary numerical scores.
Digital trade agreements Cambodia is negotiating or party to — tracking national positions, ratification progress, reservations, and negotiation timelines.
Active member state in 9-chapter DEFA negotiations. National delegation participating in SEOM text scrubbing ahead of planned November 2026 signing ceremony.
7 chapters in legal scrubbing post-57th SEOM Manila
Recent regulatory developments, investigations, and reporting tagged to Cambodia or regional ASEAN impact.
No dispatches or investigative reports currently tagged for Cambodia.
