Myanmar Cybersecurity Law (2023)
Myanmar's Cybersecurity Law (2023) establishes a cybersecurity and data protection framework. The law covers cybersecurity obligations for digital platform service providers, critical information infrastructure protection, personal data processing requirements, and cybersecurity incident reporting. Administered by the Ministry of Transport and Communications. The law has been criticised for its surveillance provisions and broad scope.
Myanmar Cybersecurity Law (2023) is a compliance framework from Myanmar with 8 domains and 8 controls that map to 23 other frameworks. The largest domains are Content Controls (1 controls), Cybersecurity Governance and CII (1 controls), Data Localisation (1 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (8)
Content Controls
| Code | Title |
|---|---|
| MMCL-5 | Content Moderation, Removal Requests, and Lawful Access |
Cybersecurity Governance and CII
| Code | Title |
|---|---|
| MMCL-1 | Cybersecurity Authority and Critical Information Infrastructure Designation |
Data Localisation
| Code | Title |
|---|---|
| MMCL-4 | Data Localisation and Cross-Border Data Transfer Controls |
Enforcement and Compliance
| Code | Title |
|---|---|
| MMCL-8 | Penalties, Enforcement, and Human Rights Considerations |
Incident Response
| Code | Title |
|---|---|
| MMCL-6 | Cybersecurity Incident Detection, Response, and Notification |
Internet Access Controls
| Code | Title |
|---|---|
| MMCL-3 | VPN Restrictions and Circumvention Tool Prohibitions |
Licensing and Authorisation
| Code | Title |
|---|---|
| MMCL-2 | Licensing of Digital Platforms and Cybersecurity Service Providers |
Technical Security Controls
| Code | Title |
|---|---|
| MMCL-7 | Network Security, Access Control, and Cryptographic Controls |
Your Compliance Coverage
If you comply with Myanmar Cybersecurity Law (2023), you already cover:
US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
13%
1 controls mapped
Compare →OWASP MASVS
13%
1 controls mapped
Compare →OWASP ASVS
13%
1 controls mapped
Compare →+ 20 more: AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) (13%), ISO/IEC 27011:2024 (13%)
See all 23 mapped frameworks ↓Maps to 23 other frameworks
What is Myanmar Cybersecurity Law (2023) and who does it apply to?
Myanmar Cybersecurity Law (2023) is a compliance framework from Myanmar with 8 domains and 8 controls. Myanmar's Cybersecurity Law (2023) establishes a cybersecurity and data protection framework. The law covers cybersecurity obligations for digital platform service providers, critical information infrastructure protection, personal data processing requirements, and cybersecurity incident reporting. Administered by the Ministry of Transport and Communications. The law has been criticised for its surveillance provisions and broad scope. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Myanmar Cybersecurity Law (2023) actually require?
Myanmar Cybersecurity Law (2023) has 8 controls organised across 8 domains. The largest domains are Content Controls (1 controls), Cybersecurity Governance and CII (1 controls), Data Localisation (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Myanmar Cybersecurity Law (2023) do I already cover?
Myanmar Cybersecurity Law (2023) maps to 23 other compliance frameworks. The top mapping partners are US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements (13% coverage), OWASP MASVS (13% coverage), OWASP ASVS (13% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Myanmar Cybersecurity Law (2023)?
Start your Myanmar Cybersecurity Law (2023) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Myanmar Cybersecurity Law (2023) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 8 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required