On 30 July 2025, the Myanmar State Administration Council published the seminal Cybersecurity Law, which is to regulate online media, digital communications and online activities in the country. The legislation possesses extraterritorial jurisdiction, and any VPN service or other digital network that exceeds a user base of 000 has to apply for a government-issued licence. It requires information on online data storage sites to keep personal information that users submit on such sites for a minimum of three years, thus providing greater control over the communication and personal information online. Anti-market infringements that carry penalties include access to unlicensed and fraudulent sites offering online gambling services or misuse of the use of cyber resources that attract heavy fines and prison terms. The law alters rules that relate to unsolicited e-communications and the offences of cybercrime. Opponents have expressed worry over privacy and limitations to freedom of expression and censorship. However, the legislation tends to respond to the existing cyber threats, as well as enhance the digital infrastructure in Myanmar. The promulgation of this law represents a major step towards a more positive change in the manner in which cybersecurity and internet governance policy can be undertaken in Myanmar.