It is reported that Lesotho procurement laws and policies require that entities have to first register as legal entities, apply for trading licenses, and register with the Lesotho Revenue Authority for tax purposes in order to apply for public procurement.

Laos lacks a comprehensive framework for consumer protection that applies to online transactions.

Laos has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Laos has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Laos has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures. Yet, in 2020, Lao PDR enacted the Law on Electronic Signature Activities, which provided a legal framework for the management and the use of electronic signatures.

According to Art. 18 of the Law on Telecommunications, the Ministry of Post and Telecommunications manages the importation of hi-technology telecommunication equipment. The regulation of the law states that the import of some types of telecommunication equipment should be subject to further control by the Ministry of Post and Telecommunications. The imported telephone sets and computers should also have a menu and be able to use content in the Lao language. It is reported that since 2022, there has been a new telecom law. However, the text is not available online.

According to Decision No. 0623/MOIC, foreign traders in Laos without a registered business must obtain a Trading Rights Certificate from the Department of Import and Export, Ministry of Industry and Commerce, to import or export goods. Foreign traders—whether individuals or legal entities—cannot sell directly to consumers in Laos and must, therefore, operate through authorised distributors. The Trading Rights Certificate qualifies foreign traders to sell and purchase goods via such distributors.
Eligibility requires compliance with their country's laws, no involvement in trading or financial crimes, and being from a WTO member country.

Art. 73 of the Standards Law allows agencies that grant standard-conformity certificates in Lao PDR to be accredited by an accreditation body recognised internationally or regionally.

Art. 9 of Decree No. 296/GOV stipulates that foreign shareholders are prohibited from holding more than 90% of the shares of the legal entity operating an electronic marketplace.

Arts. 14 and 15 of Decree No. 296/GOV stipulate that obtaining a business operation licence for electronic commerce from the Ministry of Industry is mandatory for engaging in e-commerce activities. To support this application, the following certificates must be procured: an Enterprise Registration Certificate, a certificate on technical standards of the e-commerce channel, and a certificate to use electronic payment system services.

Laos does not implement any de minimis threshold, which is the minimum value of goods below which customs do not charge duties.

In 2020, Lao PDR issued notices to online media to register with the government or be prohibited from publishing information and news on social media platforms like Facebook. It is reported that the registration enables the government to enforce the 2015 Law on Prevention and Combating Cyber Crime, which categorises the following as offences causing damage via online social media: i) Posting data and information containing aspects of persuading people to resist the government or separate national solidarity; ii) posting data and information destroying national security, peace, the order in society, national culture and fine tradition of the nation; iii) posting data and information containing blaspheming and using impolite words through the computer system.

It is reported that, according to the Decision on Approval to Operate Internet Data Center, all Internet data centres are required to have a licence to operate.

The Law on Electronic Data Protection specifies that the delivery or transfer of data must be performed as follows:
- with the consent of the data subject and guarantee that the transferee can protect such data;
- with the encryption of important information, such as financial, accounting, and investment data and with the electronic certificate issued by the Ministry of Posts and Telecommunication (Art. 25);
- without forging the source of data sent or transferred;
- that the transfer must be in accordance with the agreement of the transferee and transferor; and
- that the transfer must be stopped upon refusal by the transferee.
The transfer of private data outside of Lao PDR is subject to the express consent of the data subject and compliance with the law (Art. 17).

Laos has not joined any agreement with binding commitments to open transfers of data across borders.