Countries That Have Personal Data Protection Laws In The 2022 ASEAN Region
Negara yang punya UU Perlindungan Data Pribadi (Unsplash)

YOGYAKARTA - The COVID-19 pandemic outbreak has its lesson, it has accelerated the digitalization axis and technological solutions. Businesses in all industries in ASEAN are forced not only to adopt but also to react to digitalization. An important element of this digital revolution, no doubt, is data. Let's discuss a country that has a personal data protection law in the ASEAN region.

Machines, equipment, devices and platforms are increasingly connected to the network to communicate with each other, and are driven by a large amount of data. Without data, this digital revolution will stall. Bad data on service arrangements poses a high risk to a person's basic rights of privacy. Incidents of data breaches, either due to irresponsible data deviations or data processing, can cause irreparable damage to a business reputation.

Due to the growing interest in ESG investment (Lilangkaan, Social and Governance), investors also place strict supervision on the privacy of the company's data and security controls. This underscores the need to have strong laws and clear compliance guidelines to protect personal data and privacy. The development of data protection regulations in ASEAN has not been evenly distributed so far.

Brunei Darussalam There is no comprehensive law on data protection at this time but the country has been guided by the Data Protection Policy since 2014. This policy includes personal data (in the form of electronics or manuals) managed by government agencies and institutional education.

Cambodia The Ministry of Posts & Telecommunications for ICT Licenses (Article 27) stated that all ICT & telecommunications operators and all related people must protect personal, security and safety information using their ICT & Telecommunication System

Indonesia The Ministry of Information and Transportation Regulation No.20/2016 completes a comprehensive regulation on Personal Data Protection.

Law Number 11 of 2008 concerning Transaction Information and Electronics and Government Regulation No. 82 of 2012 concerning Provision of Systems and Electronics

Transactions ("PP 82/2012) have also been upgraded.

Laos Tidak ada rencana dari Rakyat Laos Republik Demokratik untuk membuat undang-undang tentang privasi dan perlindungan data tetapi UU Perlindungan Elektronik Data (2017) dan UU Pertahanan dan Pemberantasan Cyber Crime (2015) berkaitan dengan perlindungan pribadi informasi.

Malaysia Malaysia is currently enacting the Personal for the 2010 Data Protection Law (PDPA) through its Personal Data Department of Protection.

Myanmar In March 2017, Myanmar announced a 4-page law entitled Protecting Citizens Privacy and Security (UU Parliament Union 5/2017). According to an unofficial translation of law by the Myanmar Center for Responsible Business (MCRB), the law explicitly prohibits wiretapping of citizens' electronic communications, personal correspondence and, physical privacy, unless guaranteed by "orders".

Singapore The 2012 Personal Data Protection Act (PDPA) has been in effect since 2014, and is being implemented by the Personal Data Protection Commission.

Thailand Notification of Electronic Transactions of the Policy and Practice Committee for Personal Information Protection of Government Agencies BE 2553 (2010) and the Information Law for the Public Sector BE 2540 (1997) protect the personal information of its citizens.

is being processed by state institutions. Personal data on the Protection Act is being developed and is expected to be published soon.

Vietnam The most comprehensive legal framework on data protection is the Cyber Information Security Law (UU No. 86/2015/QH13) ("LCIS").

The Philippines - The Data Privacy Act was passed in 2012, to protect human rights to privacy, from communications while ensuring free flow of information to drive innovation and growth. (United Republic Law No. 10173, Chapter 1. 2). The privacy law also established a National Privacy Commission to enforce and supervise it and give it power to make rules. The final and regulatory implementation rules came into effect in September 2016, given the specificity of the Privacy Act.

After knowing a country that has a personal data protection law, see other interesting news on VOI, it's time to revolutionize news!


The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)