17th November 2025
Processing Health Data in Cambodia: Navigating Sensitive Data Protections Under the Upcoming Personal Data Protection Law
Healthcare providers, pharmaceutical companies, and health insurers must navigate stringent requirements for handling sensitive health data under Cambodia's PDPL. Learn the classification of health data, legal bases for processing, and comprehensive regulatory compliance obligations.
Health Data
Sensitive Data
Healthcare Compliance
Read Full Article →
21st October 2025
ASEAN Releases Comprehensive AI Governance and Ethics Guide with Expanded Framework for Generative AI
ASEAN establishes the region's first intergovernmental AI governance framework with seven core principles and specific adaptations for generative AI technologies, providing practical guidance for responsible AI deployment across Southeast Asia's diverse digital economies.
AI Governance
ASEAN Framework
Generative AI
Read Full Article →
29th September 2025
Security of Personal Data Processing Under Cambodia's Draft Personal Data Protection Law
Cambodia's Article 20 introduces comprehensive security obligations comparable to GDPR standards. Learn the mandatory risk assessment framework, technical safeguards, and organizational measures required to protect personal data throughout the processing lifecycle.
Article 20
Data Security
Risk Assessment
Read Full Article →
25th September 2025
Getting Consent Right: Key Requirements Under Cambodia's Draft Personal Data Protection Law
Understanding the critical consent obligations under Article 8 that will fundamentally reshape how organizations collect and process personal data of Cambodian residents. Learn the explicit consent standards, notification requirements, and special protections for minors.
Article 8
Consent Framework
Data Subject Rights
Read Full Article →
20th September 2025
Data Processing Agreement Under Cambodia's Draft Personal Data Protection Law
The Draft Law on Personal Data Protection introduces a comprehensive contractual framework governing relationships between data controller and data processor through Article 17. Learn the mandatory written agreement requirements and strategic implementation considerations.
Article 17
Data Processing
Contractual Framework
Read Full Article →
8th September 2025
Data Protection by Default
Explore Cambodia's Article 15(2) requirements for automatic privacy safeguards that protect data subjects without requiring their active intervention. Learn the three key implementation strategies: Optimization, Configurability, and Restriction.
Article 15(2)
Data Minimization
Automatic Protection
Read Full Article →
25th August 2025
Data Protection by Design
Data Protection by Design represents a fundamental paradigm shift in personal data governance, moving from reactive compliance to proactive privacy integration. Learn how Cambodia's Article 15(1) mandates this strategic approach for all data controllers.
DPbD
Privacy Framework
Strategic
Read Full Article →
19th August 2025
Cross Sectoral Impact & Compliance Requirements
Cambodia's Draft Law on Personal Data Protection establishes a comprehensive regulatory framework impacting all economic sectors. Organizations across industries must implement significant compliance measures regardless of their primary business activity.
Cambodia
Cross-Sector
Compliance
Read Full Article →