Status
Bill pending
Consent model
None
Primary law
Draft personal data protection law (pending); e-commerce and consumer protection laws carry data duties
Year
n/a
Authority
None yet (Ministry of Post and Telecommunications drafting)
Marketing consent
No comprehensive consent requirement; e-commerce law imposes limited confidentiality duties.
Transfers
No general rule restricts personal data leaving the country.
Penalties
Only sector-specific penalties apply.
The framework
No comprehensive data protection statute applies in Cambodia today.
With no local consent rule, platform policies and the extraterritorial reach of laws like the GDPR govern campaigns here in practice.
Marketing and advertising
No comprehensive consent requirement; e-commerce law imposes limited confidentiality duties. With no operative local consent rule, the practical guardrails are platform policy and any foreign law that can reach the campaign.
Cross-border transfers
No general rule restricts personal data leaving the country.
Enforcement and penalties
Only sector-specific penalties apply.
Cite this page: "Cambodia Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/cambodia.html. Accessed [date].