CambodiaCambodia's Draft Law on Personal Data Protection, cross-border data transfer
Draft Law on Personal Data Protection, article 23 (data transfer outside Cambodia)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
Proposed: draft date not recorded.
A cross border transfer rule binding public and private bodies.
As of 19 September 2026.
What it requires
- Cambodia's Draft Law on Personal Data Protection has not been enacted and creates no binding duty as of the date shown; the Ministry of Post and Telecommunications confirmed on 5 August 2026 that the draft remained at a pre-legislative validation-workshop stage.
- If enacted as drafted, a data controller would not be able to transfer personal data outside Cambodia unless the Ministry of Post and Telecommunications granted permission, the controller assessed that appropriate safeguards were in place, or the transfer rested on one of six listed circumstances such as the data subject's written consent.
- If enacted as drafted, a data controller relying on the safeguards or listed-circumstance grounds would have to be able to give the Ministry of Post and Telecommunications evidence of them.
What it reaches
Obligation class
Transfer
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 23 would bar a data controller from transferring personal data outside Cambodia unless the Ministry of Post and Telecommunications grants permission, the controller assesses that appropriate safeguards are in place, or the transfer rests on one of six listed circumstances, including the data subject's written consent, the necessity of performing a contract with the data subject, or the protection of the data subject's or another person's life.
A controller relying on the safeguards or listed-circumstance grounds would have to be able to provide the Ministry with evidence of them. The draft's own final page carries an unsigned, undated National Assembly signature block. The Ministry of Post and Telecommunications' own website confirmed on 5 August 2026 that the draft remained at a pre-legislative validation-workshop stage, so nothing in this row binds anyone today.
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbot
Read the law
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived December 5, 2025. Publisher's page: https://data.opendevelopmentcambodia.net/en/dataset/792fc94d-1a84-49cc-bad3-9b420f99b70f/resource/03e9c060-9bc8-42d5-80a6-8db777f61d1c/downl…Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.