Background
The General Department of Digital Technology and Media reported on the growth of digital technology use in Cambodia and the government’s policy response. Citing 2022 data on internet, social media, and mobile phone usage, the post notes that increasing adoption of digital technologies has prompted the Royal Government of Cambodia to issue three major policy frameworks to guide the creation of a digital economy and society, a digital government, and a national system for science, technology, and innovation.
To ensure that digital development proceeds in line with these policies, the government, through the competent institutions, is working on developing a cybersecurity mechanism. This mechanism is intended to support digital transformation and governance for government, business, and citizens under a sustainable and secure framework.
Scope of Application
The described cybersecurity mechanism is intended to apply across the three main digital pillars identified by the government: digital government, digital business, and digital citizens. It is framed as supporting the broader national policies on Cambodia’s digital economy and society, digital government, and science, technology and innovation, and focuses on systems operation, data management, and the use of digital technologies.
Key Provisions or Decisions
The post references three major national policy documents guiding Cambodia’s digital development:
- Cambodia Digital Economy and Society Policy 2021–2035
- Cambodia Digital Government Policy 2022–2035
- National Policy on Science, Technology and Innovation 2020–2030
In order to implement these policies, the Royal Government is reported to be preparing and studying laws and regulatory instruments related to cybersecurity. The cybersecurity mechanism is described as focusing on four main work areas:
- Preparation of legal and regulatory documents
- Awareness-raising, training, and promotion of implementation
- Inspection, evaluation, and compliance monitoring
- Correction and improvement of the mechanism
The post further notes that there are supporting normative documents for the cybersecurity mechanism, structured around the people, process, and technology (PPT) framework. These include:
- Preparation of a law on cybersecurity and technology-related crime
- Preparation of policies to support cybersecurity
- Preparation of standards to support cybersecurity
- Preparation of procedures supporting cybersecurity (item partially described in the source)
These elements are presented as components of an emerging regulatory framework for cybersecurity in Cambodia.
Implications for Investors, Businesses, or Compliance
The information indicates that Cambodia is in the process of building a formal legal and regulatory framework for cybersecurity, including a dedicated law, supporting policies, standards, and procedures. While no specific compliance obligations or timelines are detailed in the post, it signals that entities operating in Cambodia’s digital environment, including public institutions, private sector operators, and digital service users, can expect future requirements related to cybersecurity governance, data management, and technology use once these instruments are finalized and implemented.
Official Source
This summary is based on an announcement by the General Department of Digital Technology and Media published on its official Facebook page on 23 January 2023.
