Law: The Electronic Data Protection Act 2017 (only available in Lao here) (the Act)

Regulator: The Ministry of Post, Telecommunications and Communications

Summary: The Act came into force on June 23, 2017, following its adoption on May 12, 2017. The Act provides data protection to Lao citizens in circumstances where electronic information is collected, accessed, used, or disclosed. Moreover, the Act provides for general protection to personal information and establishes essential concepts such as consent, data retention and deletion practices, and ensuring data accuracy. The Act is supplemented by the Introduction on Implementation of the Electronic Data Protection Act (only available in Lao here), which sets out examples of how data protection procedures may be implemented by companies.