Myanmar’s military government officially enacted a cybersecurity law on Wednesday that regulates digital communication and penalizes various cyber crimes, according to a local newspaper that has published the first two sections of the law.
The legislation, dubbed Cybersecurity Law No. 1/2025, introduces stringent measures aimed at regulating the spread of digital information and enhancing state surveillance capabilities. The law mandates that service providers store user data for up to three years and grants authorities broad powers to surveil and control online content, effectively criminalizing virtual private networks (VPNs) without government approval. Additionally, the law’s provisions include penalties for disseminating disinformation and rumors, which could lead to fines or imprisonment for individuals and digital service providers.
Furthermore, digital platforms that fail to comply with the law’s requirements face severe sanctions, including financial penalties and potential suspension of services, placing significant pressure on companies operating in Myanmar and potentially leading to the self-censorship of content to avoid repercussions. The legal requirements are mainly in connection to the registration requirements of digital platforms, further entailing penalties for individuals and organizations found to operate digital platforms without renewing their registration.
The cybersecurity legislation reflects the junta’s ongoing efforts to consolidate power amid escalating civil unrest. The enactment of the law comes in the wake of the military coup in February 2021, which has resulted in widespread protests and armed resistance against military rule. The junta’s control over media and communication channels has intensified since the coup, with previous efforts to restrict access to social media platforms and independent news outlets. The implementation of this law is viewed by many observers as a strategic move to suppress dissent further and stifle any remaining avenues for public discourse.
Historically, Myanmar’s approach to cybersecurity has lacked transparency and accountability. The draft version of this law was first circulated in 2019 but gained urgency following the coup as the military sought to fortify its grip on power through digital repression. Critics argue that this new legislation undermines fundamental human rights, particularly privacy and freedom of expression, by creating an environment where dissent is systematically silenced. Such critics thus claim that Myanmar’s new cybersecurity legislation represents a significant escalation in state control over digital spaces, effectively curtailing citizens’ rights while reinforcing the junta’s authority in an increasingly volatile political landscape.
