Privacy Law at Laos

Laos has implemented several legal measures to address data protection and privacy, though a comprehensive, unified framework is still developing.

🇱🇦 Key Data Protection Laws in Laos

1. *Law on Electronic Data Protection (No. 25/NA, 2017)

Enacted on May 12, 2017, this law establishes the foundational legal framework for electronic data protection in Lao. It defines electronic data as information in various formats, including numbers, letters, images, and videos, stored electronicall. The law mandates that personal electronic data may only be collected, used, or disseminated with the explicit permission of the data owne. Violations of this provision are subject to penalties under the Penal Code 

2. *Penal Code (No. 62/NA, 2017)

Article 104 of the Penal Code criminalizes the unauthorized disclosure of personal confidential information obtained through professional duties, resulting in harm to the individual concerne. Offenders may face imprisonment ranging from three to six months and fines between 50,000 and 500,000 Lao Kip

3. *Instruction on Computer Security (No. 3623/MPT, 2017)

Issued by the Ministry of Post and Telecommunications, this instruction outlines minimum standards for businesses regarding network setup and protection, security management, coordination with the Computer Emergency Prevention and Solution Center, and monitoring of cyber threats

🔐 Data Classification and Employment Contex

In 2020, Laos introduced the E-Data Protection Law (No. 25/NA), which classifies electronic personal data into two categoris:

*General Data: Information such as name, position, address, telephone number, or email address that can be accessed, used, and disseminated without consent, provided the source is statd.

*Specific Data: Includes sensitive information like customer data, financial records, health information, and official secrets, which require authorization from the data owner for collection, use, or dissemination 

In employment relationships, personal information provided by employees is classified as specific daa Employers are prohibited from disclosing such information without the employee's authorization, unless required by Unauthorized disclosure may lead to criminal liability under the Penal Code 

⚖️ Enforcement and Penaltie

Violations of data protection laws in Laos can result in both administrative and criminal penaltis:

*Administrative Penalties: Fines up to LAK 100 million for severe breaches, LAK 50 million for unauthorized processing, and LAK 25 million for failure to maintain required documentation 

*Criminal Penalties: For intentional violations, fines up to LAK 100 million and imprisonment; for false statements, fines up to LAK 50 million; and for obstruction of investigations, fines up to LAK 25 million

📌 Summay

While Laos has taken steps to protect personal data through various laws and regulations, the legal landscape is still evolvn.Organizations operating in Laos should stay informed about these developments to ensure compliance with data protection requiremets.

LEAVE A COMMENT

0 comments