Back to Frameworks

Laos Law on Prevention and Combating Cybercrime (2015)

Lao PDR
vLaw No. 61/NA of 15 July 2015 (Presidential Decree No. 135/PO of 28 August 2015); Article 62 ended by the Penal Code 2017
3 domains
11 controls

The Lao PDR's cybercrime law of 2015: what every organisation using computer systems in Laos must notify, what service providers must retain, protect, pass on and preserve, and the offences and online content rules the law forbids, with the state's campaign, Lao CERT, investigation and inspection machinery; its criminal penalties now sit in the Penal Code of 2017.

Verified

Laos Law on Prevention and Combating Cybercrime (2015) is a compliance framework from Lao PDR with 3 domains and 11 controls that map to 55 other frameworks. The largest domains are Part V: Prohibitions on persons, organisations and service providers – Laos Law on Prevention and Combating Cybercrime (2015) (7 controls), Part III: Prevention duties of users and service providers – Laos Law on Prevention and Combating Cybercrime (2015) (3 controls), Part VI: Preservation of data for investigations – Laos Law on Prevention and Combating Cybercrime (2015) (1 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (3)

Part III: Prevention duties of users and service providers – Laos Law on Prevention and Combating Cybercrime (2015)

3 controls
Controls in the Part III: Prevention duties of users and service providers – Laos Law on Prevention and Combating Cybercrime (2015) domain of Laos Law on Prevention and Combating Cybercrime (2015): 3 controls
CodeTitle
laos-law-on-prevention-and-combating-cybercrime-2015::Art.20Article 20 (second paragraph) Service provider warning notices and access conditions
laos-law-on-prevention-and-combating-cybercrime-2015::Art.22Article 22 Emergency notification of cyber crime incidents
laos-law-on-prevention-and-combating-cybercrime-2015::Art.28Article 28 Security knowledge and awareness activities

Part V: Prohibitions on persons, organisations and service providers – Laos Law on Prevention and Combating Cybercrime (2015)

7 controls
Controls in the Part V: Prohibitions on persons, organisations and service providers – Laos Law on Prevention and Combating Cybercrime (2015) domain of Laos Law on Prevention and Combating Cybercrime (2015): 7 controls
CodeTitle
laos-law-on-prevention-and-combating-cybercrime-2015::Art.39-contentArticle 39(2) and (4) with Articles 13 and 14 Online content prohibitions
laos-law-on-prevention-and-combating-cybercrime-2015::Art.39-integrityArticle 39(1), (3) and (5) with Articles 8 to 12 and 15 to 18 Not committing or enabling computer-integrity offences
laos-law-on-prevention-and-combating-cybercrime-2015::Art.40.1Article 40(1) Retention of computer traffic data
laos-law-on-prevention-and-combating-cybercrime-2015::Art.40.2Article 40(2) Retention of user data linked to damage
laos-law-on-prevention-and-combating-cybercrime-2015::Art.40.3Article 40(3) with Articles 32(8), 50(6) and 60(1) and (2) Accurate and timely information to the authorities
laos-law-on-prevention-and-combating-cybercrime-2015::Art.40.4Article 40(4) Confidentiality of service consumers' data
laos-law-on-prevention-and-combating-cybercrime-2015::Art.40.5Article 40(5) Not providing conditions or facilities for cyber crime

Part VI: Preservation of data for investigations – Laos Law on Prevention and Combating Cybercrime (2015)

1 controls
Controls in the Part VI: Preservation of data for investigations – Laos Law on Prevention and Combating Cybercrime (2015) domain of Laos Law on Prevention and Combating Cybercrime (2015): 1 controls
CodeTitle
laos-law-on-prevention-and-combating-cybercrime-2015::Art.45Article 45 (second and third paragraphs) Preservation of data under an investigation order

Maps to 55 other frameworks

19 total controls
ASD Strategies to Mitigate Cyber Security Incidents
2 source controls mapped|5 target controls covered
11%
US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
2 source controls mapped|1 target controls covered
11%
FFIEC Cybersecurity Assessment Tool (CAT)
2 source controls mapped|2 target controls covered
11%
ISO/IEC 27010:2015
2 source controls mapped|2 target controls covered
11%
South Korea ISMS-P
2 source controls mapped|2 target controls covered
11%
FFIEC IT Examination Handbook
2 source controls mapped|4 target controls covered
11%
ISO 28001:2007 Supply Chain Security Management
2 source controls mapped|2 target controls covered
11%
API 1164
2 source controls mapped|4 target controls covered
11%
ISO/IEC 27019:2024
2 source controls mapped|4 target controls covered
11%
IEC 62443
2 source controls mapped|4 target controls covered
11%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
2 source controls mapped|2 target controls covered
11%
OWASP ASVS
1 source controls mapped|1 target controls covered
5%
MITRE D3FEND
1 source controls mapped|1 target controls covered
5%
ISO/IEC 27011:2024
1 source controls mapped|2 target controls covered
5%
ISO/SAE 21434
1 source controls mapped|1 target controls covered
5%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
1 source controls mapped|2 target controls covered
5%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
1 source controls mapped|1 target controls covered
5%
ISO/IEC 27043:2015
1 source controls mapped|1 target controls covered
5%
Voluntary Principles on Security and Human Rights (VPs)
1 source controls mapped|1 target controls covered
5%
US Gramm-Leach-Bliley Act (GLBA) - Higher Education Safeguards Rule
1 source controls mapped|1 target controls covered
5%
Turkey KVKK
1 source controls mapped|1 target controls covered
5%
TEFCA - Trusted Exchange Framework and Common Agreement
1 source controls mapped|1 target controls covered
5%
Singapore Cybersecurity Act 2018
1 source controls mapped|1 target controls covered
5%
Protective Security Policy Framework (PSPF) Release 2026
1 source controls mapped|1 target controls covered
5%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
5%
Pakistan Personal Data Protection Bill 2023
1 source controls mapped|1 target controls covered
5%
OWASP Top 10:2025
1 source controls mapped|1 target controls covered
5%
OWASP DevSecOps Maturity Model (DSOMM)
1 source controls mapped|1 target controls covered
5%
Nevada Gaming Control Board Cybersecurity Requirements
1 source controls mapped|1 target controls covered
5%
Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
5%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
5%
EASA Part-IS - Information Security in Aviation
1 source controls mapped|3 target controls covered
5%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|3 target controls covered
5%
BSI IT-Grundschutz
1 source controls mapped|3 target controls covered
5%
APPI
1 source controls mapped|2 target controls covered
5%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
5%
ISO/IEC 27400:2022
1 source controls mapped|1 target controls covered
5%
ISO/IEC 30111:2019
1 source controls mapped|2 target controls covered
5%
South Korea PIPA
1 source controls mapped|2 target controls covered
5%
Annex 11 to EU GMP - Computerised Systems
1 source controls mapped|1 target controls covered
5%
APRA CPS 230 Operational Risk Management
1 source controls mapped|1 target controls covered
5%
APRA CPS 234
1 source controls mapped|2 target controls covered
5%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|1 target controls covered
5%
UK Defence Standard 05-138 - Cyber Security for Defence Suppliers
1 source controls mapped|2 target controls covered
5%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|1 target controls covered
5%
ISO 22320:2018
1 source controls mapped|3 target controls covered
5%
ITIL 4
1 source controls mapped|1 target controls covered
5%
FTC GLBA Safeguards Rule (16 CFR Part 314)
1 source controls mapped|1 target controls covered
5%
Canada ITSG-33 - IT Security Risk Management
1 source controls mapped|1 target controls covered
5%
Bahrain PDPL
1 source controls mapped|2 target controls covered
5%
ISO/IEC 20000-1:2018
1 source controls mapped|1 target controls covered
5%

Coverage is not the same as your position

This page shows what Laos Law on Prevention and Combating Cybercrime (2015) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Laos Law on Prevention and Combating Cybercrime (2015) and who does it apply to?

Laos Law on Prevention and Combating Cybercrime (2015) is a compliance framework from Lao PDR with 3 domains and 11 controls. The Lao PDR's cybercrime law of 2015: what every organisation using computer systems in Laos must notify, what service providers must retain, protect, pass on and preserve, and the offences and online content rules the law forbids, with the state's campaign, Lao CERT, investigation and inspection machinery; its criminal penalties now sit in the Penal Code of 2017. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Laos Law on Prevention and Combating Cybercrime (2015) actually require?

Laos Law on Prevention and Combating Cybercrime (2015) has 11 controls organised across 3 domains. The largest domains are Part V: Prohibitions on persons, organisations and service providers – Laos Law on Prevention and Combating Cybercrime (2015) (7 controls), Part III: Prevention duties of users and service providers – Laos Law on Prevention and Combating Cybercrime (2015) (3 controls), Part VI: Preservation of data for investigations – Laos Law on Prevention and Combating Cybercrime (2015) (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Laos Law on Prevention and Combating Cybercrime (2015) do I already cover?

Laos Law on Prevention and Combating Cybercrime (2015) maps to 55 other compliance frameworks. The top mapping partners are ASD Strategies to Mitigate Cyber Security Incidents (11% coverage), US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements (11% coverage), FFIEC Cybersecurity Assessment Tool (CAT) (11% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Laos Law on Prevention and Combating Cybercrime (2015)?

Start your Laos Law on Prevention and Combating Cybercrime (2015) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Laos Law on Prevention and Combating Cybercrime (2015) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 11 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required