The framework
Bhutan has no single comprehensive statute and protects personal data through sectoral rules, principally the Information, Communications and Media Act 2018 (data provisions).
With no local consent rule, platform policies and the extraterritorial reach of laws like the GDPR govern campaigns here in practice.
Key instruments
Information, Communications and Media Act 2018 (data provisions)
Bhutan protects personal information through provisions of its 2018 ICM Act; a standalone privacy statute has been discussed but not enacted.
Marketing and advertising
Sectoral ICT provisions require care with personal information; no comprehensive consent regime. With no operative local consent rule, the practical guardrails are platform policy and any foreign law that can reach the campaign.
Cross-border transfers
No general rule restricts personal data leaving the country.
Enforcement and penalties
Only sector-specific penalties apply.