Myanmar Cybersecurity Law (2023)
Myanmar's Cybersecurity Law (2023) establishes a cybersecurity and data protection framework. The law covers cybersecurity obligations for digital platform service providers, critical information infrastructure protection, personal data processing requirements, and cybersecurity incident reporting. Administered by the Ministry of Transport and Communications. The law has been criticised for its surveillance provisions and broad scope.
Myanmar Cybersecurity Law (2023) is a compliance framework from Myanmar with 8 domains and 8 controls that map to 21 other frameworks. The largest domains are Content Controls (1 controls), Cybersecurity Governance and CII (1 controls), Data Localisation (1 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
Content Controls
| Code | Title |
|---|---|
| MMCL-5 | Content Moderation, Removal Requests, and Lawful Access |
Cybersecurity Governance and CII
| Code | Title |
|---|---|
| MMCL-1 | Cybersecurity Authority and Critical Information Infrastructure Designation |
Data Localisation
| Code | Title |
|---|---|
| MMCL-4 | Data Localisation and Cross-Border Data Transfer Controls |
Enforcement and Compliance
| Code | Title |
|---|---|
| MMCL-8 | Penalties, Enforcement, and Human Rights Considerations |
Incident Response
| Code | Title |
|---|---|
| MMCL-6 | Cybersecurity Incident Detection, Response, and Notification |
Internet Access Controls
| Code | Title |
|---|---|
| MMCL-3 | VPN Restrictions and Circumvention Tool Prohibitions |
Licensing and Authorisation
| Code | Title |
|---|---|
| MMCL-2 | Licensing of Digital Platforms and Cybersecurity Service Providers |
Technical Security Controls
| Code | Title |
|---|---|
| MMCL-7 | Network Security, Access Control, and Cryptographic Controls |
Your Compliance Coverage
If you comply with Myanmar Cybersecurity Law (2023), you already cover:
US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
13%
1 controls mapped
Compare →OWASP MASVS
13%
1 controls mapped
Compare →OWASP ASVS
13%
1 controls mapped
Compare →+ 18 more: AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) (13%), ISO/IEC 27011:2024 (13%)
See all 21 mapped frameworks ↓Maps to 21 other frameworks
Coverage is not the same as your position
This page shows what Myanmar Cybersecurity Law (2023) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Myanmar Cybersecurity Law (2023) and who does it apply to?
Myanmar Cybersecurity Law (2023) is a compliance framework from Myanmar with 8 domains and 8 controls. Myanmar's Cybersecurity Law (2023) establishes a cybersecurity and data protection framework. The law covers cybersecurity obligations for digital platform service providers, critical information infrastructure protection, personal data processing requirements, and cybersecurity incident reporting. Administered by the Ministry of Transport and Communications. The law has been criticised for its surveillance provisions and broad scope. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Myanmar Cybersecurity Law (2023) actually require?
Myanmar Cybersecurity Law (2023) has 8 controls organised across 8 domains. The largest domains are Content Controls (1 controls), Cybersecurity Governance and CII (1 controls), Data Localisation (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Myanmar Cybersecurity Law (2023) do I already cover?
Myanmar Cybersecurity Law (2023) maps to 21 other compliance frameworks. The top mapping partners are US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements (13% coverage), OWASP MASVS (13% coverage), OWASP ASVS (13% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Myanmar Cybersecurity Law (2023)?
Start your Myanmar Cybersecurity Law (2023) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Myanmar Cybersecurity Law (2023) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.
Get Started Free →Free forever, no credit card required