Criminal Code, offences in the information technology sector
Criminal Code of the Kingdom of Cambodia (2009), Arts. 427-432
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not fraudulently access or maintain access to a computer system located in Cambodia, including to copy, alter, or delete data from it.
- Reading a public, unauthenticated page without deception has not itself been held to meet this standard, and no reported case has tested the question.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Imprisonment from one month to one year and a fine from KHR 100,000 to KHR 2,000,000 for the base offence (Art. 427); imprisonment from one to two years and a fine from KHR 2,000,000 to KHR 4,000,000 where access alters or deletes data or system functioning (Art. 427, second paragraph), for obstructing system operations (Art. 428), for fraudulently introducing, deleting, or modifying data (Art. 429), or for participating in a group formed to prepare such an offence (Art. 430); an attempt draws the same penalties (Art. 431).
Penalty structure
Tiered fixed fines: KHR 100,000 to KHR 2,000,000 for the base offence under Art. 427, rising to KHR 2,000,000 to KHR 4,000,000 for the aggravated form of Art. 427 and for Arts. 428 to 430; each fine tier carries the imprisonment term stated in criminal_exposure_note.
- Rule
- Fixed only
- As of
- 6 September 2026
- Currency
- KHR
- Fixed cap
- 4,000,000
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 427 punishes fraudulently accessing or maintaining access to a system of automated data processing with imprisonment of one month to one year and a fine of KHR 100,000 to KHR 2,000,000. Where the access results in deleting or modifying the system's data or altering how the system functions, the same article raises the penalty to imprisonment of one to two years and a fine of KHR 2,000,000 to KHR 4,000,000.
Article 428 punishes obstructing the operations of an automated data processing system, and Article 429 punishes fraudulently introducing, deleting, or modifying data in such a system, each at the same one-to-two-year, KHR 2,000,000-to-4,000,000 tier. Article 430 extends that same tier to participating in a group or agreement formed to prepare an offence under the Chapter. Article 431 applies the same penalties to an attempt.
None of these articles conditions liability on infringing a security measure, and no reported Cambodian case addresses whether reading a public, unauthenticated page satisfies the "fraudulent" access standard.
When LexLint raises it
crawls_webtrains_models
Read the law
Official English translation of the Criminal Code of the Kingdom of Cambodia (2009)
United Nations Office on Drugs and Crime SHERLOC legislation database