Myanmar enacts cybersecurity law that aims to restrict use of VPNs

Myanmar’s junta has enacted a cybersecurity law that will penalize unauthorized provision of virtual private networks, or VPNs, which many people use to circumvent internet restrictions to get access to news and information and to report on what is going on in their country.

The law, which came into effect on Wednesday, is aimed at preventing cyberattacks through electronic technology that threatens national sovereignty, peace, and stability, as well as to effectively investigate and bring charges against cybercrimes, the ruling military said in a statement published in newspapers.

Myanmar cracked down on the internet and the media after the military ousted an elected government in early 2021, sparking an armed uprising that has raised questions about the sustainability of widely unpopular army rule.

With the media under the control of the military largely a mouthpiece of the generals, many people rely on VPNs to skirt control and get access to independent and foreign media and to send material out of the country.

The law sets out a penalty of six months in prison and a fine for “unauthorized VPN installation or service.”

A VPN service provider told Radio Free Asia that the law could be disastrous for his business.

“It’s really bad for us,” said the service provider, who declined to be identified for security reasons.

“Even if there’s demand, we don’t dare sell it. We’ll keep an eye on whether they actually take action on it or not. If they really crack down on providing VPN service, we’ll have to register officially.”

The law also sets out jail for up to six months, and or a fine, for distributing, transferring, copying or selling information that is “inappropriate for the public” through electronic technology.

It also sets out jail of six months to a year for anyone found operating an illegal online gambling system. Illegal gambling, often organized by gangsters from China, has proliferated in more lawless parts of Myanmar and elsewhere in Southeast Asia.

RELATED STORIES

After 2024 setbacks, junta forces now control less than half of Myanmar

Acts of charity bring light to wartime Myanmar

Air, artillery strikes set grim benchmark for civilian casualties in Myanmar in 2024

A legal expert, who spoke on condition of anonymity for security reasons, told RFA that there should be a limit to the extent authorities can control online activity and the law posed a threat to public privacy and security.

“If these technologies are used for gambling or for criminal purposes, there needs to be a provision to take effective action. However, we see that the law’s intent is to harm the public’s security and privacy,” he said.

The law also states that Myanmar people living abroad can be punished.

“Myanmar citizens residing in foreign countries shall be liable to punishment under this law if they commit any offense,” according to a copy of the legislation published in newspapers.

Many Myanmar people living abroad try to report news from their country and organize opposition to the military via online communities.

Edited by RFA Staff.