Myanmar does not have a comprehensive regime in place for all personal data. However, the Constitution of the Republic of the Union of Myanmar and the Law Protecting the Privacy and Security of Citizens set out provisions for the protection of privacy and security of communications. These are supplemented by sectoral legislation, such as the Telecommunications Law 2013, which contains provisions related to the confidentiality of personal information.

Art. 27 of the Electronic Transactions Law requires personal data administrators to retain personal data for a specified period before destruction. However, the regulation does not define the exact duration for which the data must be retained.

Section 33 of the Cybersecurity Law provides that a digital platform service provider shall retain, for a period of three years, specified categories of data relating to users of the service, namely: (a) the personal information of users accessing the service; (b) records of users’ utilisation of the service; and (c) such additional data as may be prescribed by the Department from time to time. Section 34 further stipulates that where any individual or organisation duly authorised under any law in force submits a written request for any or all of the data referred to in Section 33, the digital platform service provider is obliged to furnish such data in the prescribed manner. Pursuant to Section 4, “digital platform services” are defined as a category of business that provides services enabling users to display, transmit, disseminate, or otherwise utilise information online through cyber resources or analogous technologies and associated equipment, while a “digital platform service provider” refers to any person or organisation that offers such services for use within the State.

Myanmar lacks a comprehensive framework in place that provides effective protection of trade secrets, but there are limited measures addressing some issues related to them. Protection for confidential information comes from the law of contract, so there is no means of protection where no contractual relationship exists. The secret know-how will only be protected on the basis of a mutual legal relation created by agreements (non-disclosure or confidentiality agreements/clauses) signed with subcontractors, licensees, etc., obliging them to keep the information confidential, as well as agreements signed with employees under which they have a duty not to disclose the confidential information, both during the term of their employment and after its termination, and also obliging them (contractors, licensees, employees, etc.) not to use it for competition purposes.
Additionally, Section 19 of the Competition Law 2015 ('the Competition Law') refers to disclosing or using secrets of another business. In particular, no businessman shall, in respect of disclosing secrets of any other business, carry out any of the following acts: infringing security measures protected by the lawful owners of business secrets by accessing and collecting business secrets and information related to such secrets; using or revealing information of business secret without permission of the lawful owner of such business; deceiving a person with an obligation to maintain secrets or abusing the confidence of such person in accessing, collecting, or revealing business secrets and information related to such secrets.

It is reported that there is no obligation for passive infrastructure sharing in Myanmar to deliver telecom services to end users. However, it is practised in both the mobile and fixed sectors based on commercial agreements.

Section 3 of the State-Owned Economic Enterprise Law No. 9/89 stipulates that certain activities, including telecommunications services, are reserved exclusively for the State. However, the Government retains the authority to permit, via notification, the execution of these reserved activities through joint ventures between the Government and other individuals or economic organisations. It has been observed that the Government frequently grants exceptions to the exclusive rights of SOEs in various economic sectors, including telecommunications, by allowing joint ventures or issuing special licenses.

It is reported that the Government of Myanmar holds interests in certain telecommunications companies. In particular, Myanma Posts and Telecommunications (MPT), the incumbent telecommunications operator, is administered by the Ministry of Communications and Information Technology (MCIT). However, the precise shareholding structure is unclear, particularly following the Joint Operations Agreement concluded in July 2014 with KDDI Summit Global Myanmar (KSGM), ultimately owned by the Japanese corporations KDDI Corporation and Sumitomo Corporation. Mytel likewise operates as a joint venture between a military-backed conglomerate and Viettel, a telecommunications company owned by the Vietnamese Ministry of Defence, although the respective ownership proportions are not publicly disclosed. Moreover, the remaining mobile service providers, Atom (formerly Telenor) and U9 (formerly Ooredoo), were operated by foreign companies prior to February 2021 but have since come under the ownership of firms reportedly linked to the military. For instance, in May 2024, Ooredoo completed the sale of its Myanmar operations to Nine Communications, a Singapore-based subsidiary allegedly controlled by military-linked individuals, and subsequently rebranded as U9 Myanmar. Similarly, Telenor divested its Myanmar operations in March 2022 to Investcom, a joint venture between Lebanon-based M1 Group and the military-linked local firm Shwe Byain Phyu, with the operator rebranded as Atom in June 2022. In February 2024, Shwe Byain Phyu reportedly sold its majority stake in Atom to Myancom Holding, following which allegations emerged that Myancom Holding functions as a shell company with beneficiaries identical to those of Shwe Byain Phyu; the precise ownership percentages in Atom, however, remain unclear.

It is reported that Malaysia does not require functional separation for operators with significant market power (SMP) in the telecom market. However, since 2015, there has been an obligation for accounting separation.

Chapter 3 of the Myanmar Telecommunications Law stipulates that any person, department, or business organisation, inside Myanmar or from abroad, willing to provide the following facilities and/or telecommunication services shall apply to the Directorate of Communication under the Ministry of Communications and Information Technology for permission and licence for the following services: (i) Network facility services (NFS); (b) Network Services (NS); and (ii) Application services (AS).
It is reported that the government issues tenders upon granting telecommunications licenses. The Government determines from a policy standpoint how many operators to let in. In addition, in 2020, it was reported that the government of Myanmar reportedly threatened to cancel licenses unless their holders complied with demands to block websites, including news outlets. Local government officials also stressed the need for providers to obtain permits to lay fibre-optic cables, build towers, and install Wi-Fi devices.

Myanmar has not appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

Myanmar lacks a telecommunications regulator that operates independently of the government in its decision-making processes. Regulatory authority over the sector rests with the Posts and Telecommunications Department (PTD) within the Ministry of Transport and Communications (MoTC). As a ministerial body reportedly administered by former military officials, the PTD is devoid of both legal and practical safeguards to ensure its independence in regulatory and operational matters. It is reported that the military exercises control over the PTD’s oversight of telecommunications companies and licensing procedures. Furthermore, the PTD’s decisions are characterised by a lack of transparency and appear to exhibit a consistent bias in favour of the military’s interests.

Section 27-A(ii) of the Electronic Transactions Law, as amended in 2021 by Law No. 7/2021, mandates the personal data administrator to seek the consent of the owner of data before any data transfer. However, the law does not further regulate the ways in which the owner's consent is sought.

Art. 1(d) of the Myanmar Investment Commission Notification No. 15/2017 requires investments in telecommunication services, the production and distribution of satellite communication items, radar communication items and related equipment, radio communication, and the production and domestic marketing of mobile handset and telephone to get approval from the Ministry of Transport and Telecommunication.
According to Art. 64 of the Ministry of Planning and Finance Notification No. 35/2017, investment proposals are evaluated based on whether "the investment is compatible with national development, security, economic, social and cultural policies, taking into consideration development, security, economic, social and cultural policy objectives announced by the Government or the government of any State or Region affected by the investment."

Section 24 of the Cybersecurity Law stipulates that any digital platform service provider with 100,000 or more users within the State must be incorporated as a company in accordance with the Myanmar Companies Law and is required to submit an application for registration to the relevant Department in the prescribed manner. Pursuant to Section 4, “digital platform services” are defined as a category of business that provides services enabling users to display, transmit, disseminate, or otherwise utilise information online through cyber resources or analogous technologies and associated equipment, while a “digital platform service provider” refers to any person or organisation that offers such services for use within the State.

According to Art. 110 of the Patent Law, where the applicant’s residence or principal place of business is outside the territory of the State, the patent application may be applied through the representative or patent agent who is registered in the prescribed manner by the Department in accordance with the provisions of this Law.