Charmian Aw and Ciara O’leary of Hogan Lovells write:
On July 23, 2025, Cambodia released a draft of its first ever comprehensive personal data protection law, the Law on Personal Data Protection (“LPDP”).
Once passed, Cambodia will join the ranks of seven other countries in the Association of Southeast Asian Nations (ASEAN) to have enacted a comprehensive data privacy law.
The LPDP is expected to come into effect after a two-year implementation period starting from its promulgation. It has been tentatively indicated that this promulgation will be sometime this or early next year.
The LPDP borrows much of its architecture from the European Union’s General Data Protection Regulation (“GDPR”), and aims to establish principles, rules and mechanisms of processing personal data transparently, responsibly, and ethically. It aims to achieve this by introducing rules, empowering guidelines and supporting various mechanisms for processing private information in Cambodia.
Read more at Hogan Lovells.