Effective January 1, 2025, Myanmar's new Cybersecurity Law has officially come into force. This comprehensive legislation aims to regulate the use of cyber resources, enhance cybersecurity measures, and safeguard the nation from cyber threats while supporting the digital economy. Below is a detailed summary of the key provisions and implications of the law, compiled from various sources and reports.

Key Objectives of the Cybersecurity Law

The Cybersecurity Law is enacted with the following goals:

1. To ensure the secure use of cyber resources, critical information infrastructures, and electronic information.
2. To protect Myanmar’s sovereignty and stability from cyber threats, including cyber-attacks and misuse of electronic technologies.
3. To systematically develop cybersecurity services and infrastructure.
4. To facilitate effective investigation and prosecution of cybercrimes.
5. To support the development of the digital economy based on secure cyber resources.

Jurisdiction and Applicability

The law applies to:

• Offenses committed within Myanmar’s cyberspace.
• Crimes on vessels or aircraft registered under Myanmar’s laws.
• Crimes in cyberspace connected to Myanmar’s national cyberspace.
• Crimes committed by Myanmar citizens abroad that fall under the purview of the cybersecurity law.

Key Provisions and Penalties

VPN Establishment and Services

• Unauthorized establishment or provision of VPN services is punishable by:
  • Imprisonment: Minimum 1 month to a maximum of 6 months.
  • Fines: Between 1 million and 10 million kyats.
  • Confiscation of related materials as national treasure.
  • For companies: Minimum fine of 10 million kyats and confiscation of evidence.

Online Gambling Systems

• Operating unauthorized online gambling systems results in:
  • Imprisonment: Minimum 6 months to a maximum of 1 year.
  • Fines: Between 5 million and 20 million kyats.
  • Confiscation of related materials as national treasure.
  • For companies: Minimum fine of 20 million kyats and confiscation of evidence.

Dissemination of Inappropriate Content

• Electronic dissemination, copying, or sale of inappropriate content is punishable by:
  • Imprisonment: Minimum 1 month to a maximum of 6 months.
  • Fines: Between 1 million and 10 million kyats.
  • Both punishments may apply.

Theft or Destruction of Online Currency

• Theft, destruction, or forced transfer of online currency using cyber resources:
  • Imprisonment: Minimum 2 years to a maximum of 7 years.
  • Fines may also be imposed.

Tampering with Critical Information Infrastructure

• Unauthorized tampering, destruction, or modification of critical information infrastructure:
  • Imprisonment: Minimum 6 months to a maximum of 3 years.
  • Fines: Between 5 million and 20 million kyats.
  • Both punishments may apply.

Unlicensed Cybersecurity Services

• Operating cybersecurity services without a license:
  • Imprisonment: Minimum 1 month to a maximum of 6 months.
  • Fines: Between 1 million and 10 million kyats.
  • Confiscation of related materials as national treasure.
  • For companies: Minimum fine of 10 million kyats and confiscation of evidence.

Failure to Renew Licenses

• Continuing operations without license renewal:
  • Fines: Between 1 million and 5 million kyats.
• Digital platform service operators with over 100,000 users failing to register:
  • Fines: Minimum 100 million kyats.
  • Evidence confiscated as national treasure.
• Failing to renew registration for digital platform services:
  • Fines: Minimum 50 million kyats.

Cyber Misuse and Malware

• Misusing cyber resources or installing malware:
  • Imprisonment: Minimum 1 year to a maximum of 2 years.
  • Fines: Between 5 million and 20 million kyats.
  • Both punishments may apply.

Broader Implications

The Cybersecurity Law of 2025 aims to modernize Myanmar’s digital infrastructure and ensure the security of its cyberspace. However, it introduces stringent measures, especially regarding VPN usage and digital platform operations. Businesses and individuals engaged in digital activities in Myanmar must ensure strict compliance to avoid severe penalties.

Should you have any questions, please do not hesitate to reach out to our team. We remain committed to providing you with the support and guidance needed to navigate through regulatory updates effectively.