The framework
Laos has no single comprehensive statute and protects personal data through sectoral rules, principally the Law on Electronic Data Protection (2017).
For media planning that means an opt-in posture, with consent capture built before campaigns launch.
Key instruments
Law on Electronic Data Protection (2017)
The 2017 Electronic Data Protection Law covers electronic personal and organizational data with consent-style duties, but it falls short of a comprehensive privacy statute and sees little enforcement.
Marketing and advertising
Consent-oriented rules for electronic data; scope and enforcement are narrow. Treat the consent note above as the planning rule; the penalty line below is what mispricing it costs.
Cross-border transfers
Some categories of data need government approval before leaving the country.
Enforcement and penalties
The law provides for administrative sanctions.