CambodiaCambodia's Draft Law on Personal Data Protection, sensitive personal data
Draft Law on Personal Data Protection, article 14 (sensitive personal data)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
Proposed: draft date not recorded.
A sensitive categories rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Cambodia's Draft Law on Personal Data Protection has not been enacted and creates no binding duty as of the date shown; the Ministry of Post and Telecommunications confirmed on 5 August 2026 that the draft remained at a pre-legislative validation-workshop stage.
- If enacted as drafted, a data controller would be prohibited from processing sensitive personal data, which would include a facial image, fingerprints, or another biometric identifier, genetic data, health data, and data revealing racial origin, political opinions, religious or philosophical beliefs, or trade union membership, unless it also met one of nine listed conditions, such as the data subject's explicit consent.
What it reaches
Excludes recording-derived identifiersNo
Obligation class
Prohibition, Consent, Biometric
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 14 would prohibit the processing of sensitive personal data unless a data controller both has a legal basis under article 7 and meets one of nine additional listed conditions, beginning with the data subject's explicit consent.
The glossary defines sensitive personal data as personal data revealing racial origin, political opinions, religious or philosophical beliefs, or trade union membership, biometric data, genetic data, health data, and data concerning a natural person's sex life or sexual orientation.
It defines biometric data as personal data resulting from technical processing relating to an individual's physical, physiological, or behavioural characteristics from which they can be identified, giving a facial image or fingerprints as examples. The draft's own final page carries an unsigned, undated National Assembly signature block.
The Ministry of Post and Telecommunications' own website confirmed on 5 August 2026 that the draft remained at a pre-legislative validation-workshop stage, so nothing in this row binds anyone today.
When LexLint raises it
crawls_webtrains_modelsprocesses_biometricsprocesses_voice
Read the law
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived December 5, 2025. Publisher's page: https://data.opendevelopmentcambodia.net/en/dataset/792fc94d-1a84-49cc-bad3-9b420f99b70f/resource/03e9c060-9bc8-42d5-80a6-8db777f61d1c/downl…Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.