Malaysia is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

Mongolia lacks a comprehensive consumer protection framework applicable to online transactions. The Law of Mongolia on Consumer Rights Protection lacks specific provisions addressing digital transactions.

Mongolia has signed and ratified the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Mongolia has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Mongolia has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

Reports indicate that cross-border payment options are limited, and Mongolians face considerable challenges in accessing them, as these services are neither seamless nor cost-effective. In addition, stakeholder awareness of the legal framework governing electronic payments remains low. In this context, one barrier to domestic e-commerce is inconsistent and unclear government regulations that affect payment processes.

Mongolia implements a de minimis threshold, that is the minimum value of goods below which customs do not charge duties, only in limited cases. Pursuant to Section 38.1.15 of the Law on Customs Tariffs and Customs Duties, certain goods imported into Mongolia’s customs territory are exempt from customs duties. This exemption applies to international postal parcels addressed to an individual, provided that the parcel value does not exceed 10 times the minimum monthly wage and that it contains no more than two units of each identical item.

Pursuant to Section 4.3 of the Annex to Communications Regulatory Commission of Mongolia (CRC) Resolution No. 242, which revises and approves the Procedures for Registration and Use of Domain Names, only persons or legal entities with a residential address or legal registration in Mongolia may apply to own “.mn” and “.мон” domain names. Sections 4.6–4.7 further require individuals to provide a Mongolian residential address, while legal entities must provide evidence of registration and address information in Mongolia.

According to Section 6.2.4 of the "General Terms and Conditions for the Regulation of Digital Content Services", website service providers that enable users to create content and facilitate a user comment section are required to display the user's full Internet Protocol (IP) address within publicly accessible user-generated content. Pursuant to Section 2.4, a website service provider is defined as an individual or legal entity that disseminates news, information, and other forms of content to the public through communication network services.

Art. 25 of the Law on Child Protection stipulates that electronic service providers are responsible for refraining from disseminating prohibited content and are obliged to actively monitor, restrict, and block harmful material. In addition, internet service providers are required to implement technological measures to limit the distribution of harmful and prohibited content accessible to children online, in accordance with decisions issued by authorised organisations.

According to Section 6.2.1 of the "General Terms and Conditions for the Regulation of Digital Content Services", providers of website services that allow users to generate content and maintain a user comment section are required to implement a word filtering programme operated by the Communications Regulatory Commission. Reports indicate that this filtering software identifies prohibited keywords and replaces them with asterisks. However, the software is reportedly flawed, as it fails to consider the context of words and indiscriminately blocks any terms that contain letters or syllables resembling those of the prohibited words. Pursuant to Section 2.4, a website service provider is defined as an individual or legal entity that disseminates news, information, and other forms of content to the public through communication network services.

According to Sections 1.2 and 3 of the "General Terms and Conditions for the Regulation of Digital Content Services", content aggregators, content providers, website service providers, and content service providers are required to obtain a special licence. In addition, in accordance with Section 3.4, the service provider of a news website operating in Mongolia must register with the Communications Regulatory Commission.

Art. 8.1, Clause 9.3, of the Law on Permits lists “using information networks and providing services” as an activity requiring a special permit issued by the Communications Regulatory Commission. Art. 19¹.1 of the Communications Law further clarifies the scope of this category, indicating that it includes IP-based interconnection, data-storage infrastructure, content distribution networks, and virtual network activity between demarcation points.