What Cambodia Personal Data Protection Framework - Sub-Decree No. 252 (2021), Constitutional Privacy and Draft PDP Law requires
Cambodia has not yet enacted a comprehensive personal data protection law and is one of the last ASEAN states without one. Personal data protection currently rests on the constitutional protection of privacy, on sectoral instruments - notably Sub-Decree No. 252 (2021) on the Management, Use and Protection of Personal Identification Data, administered by the Ministry of Interior - and on the draft Law on Personal Data Protection led by the Ministry of Posts and Telecommunications (MPTC), which has been under public consultation since 2023. Together with ASEAN data-protection principles, these form the operative basis for personal data handling in Cambodia. The workflow below sets out aligned good-practice controls (notification, consent, sensitive-data safeguards, breach response, and cross-border transfer assessment) consistent with Sub-Decree No. 252, the draft law, and ASEAN principles pending comprehensive legislation.
Pillar: Cybersecurity · Authority: Ministry of Interior (Sub-Decree No. 252 of 2021 on personal identification data) and Ministry of Posts and Telecommunications (draft Law on Personal Data Protection), Cambodia · Version: 1.0.0 · Last updated:
Primary source: https://data.opendevelopmentcambodia.net/laws_record/draft-law-on-personal-data-protection
SHA-256 integrity: 326aebb24d5417e32a4af918cca85c50e2f97081129dc096acc8c3f613e43364
Primary Citations — 7 traced to source
- Cambodia draft Law on Personal Data Protection (Ministry of Posts and Telecommunications) and Sub-Decree No. 252 (2021) on the Management, Use and Protection of Personal Identification Data (Ministry of Interior) - scope: personal data processing by government and private entities; personal data definition; processing principles: lawfulness, purpose limitation, proportionality, accuracy, security, confidentiality; sensitive personal data: health, ethnic origin, religion, financial information, biometric; data subject rights: access, correction, deletion; consent requirement; breach notification; cross-border transfer restrictions; administrative and criminal penalties
- Ministry of Interior of Cambodia - Krasouang Moha Phteah - competent authority designated under the Cambodian draft PDP Law and Sub-Decree No. 252 (2021); mandate covers oversight and enforcement of personal data protection standards; receives breach notifications; investigates complaints; issues administrative sanctions; may refer criminal violations for prosecution; moi.gov.kh is the official Ministry of Interior portal
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/kh-pdpl-2022.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/kh-pdpl-2022.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/kh-pdpl-2022
- Back to registry: Browse all 10,108 compliance nodes