Key Facts
Overview
Laos's LEDP provides a basic framework for electronic data protection, classifying data into general and protected categories. Unlike most of its ASEAN neighbors, Laos follows a notice-only/opt-out model rather than requiring prior opt-in consent, making it one of the less developed data protection frameworks in the region.
What This Means for Your Website
- Data controllers must inform individuals about data collection (notice-based)
- Individual rights include access, rectification, erasure, and opt-out
- The law covers foreign entities without physical presence in Laos
- Enforcement mechanisms are limited compared to more modern ASEAN laws
- Specific penalty amounts are not publicly documented
Key Requirements
The Ministry of Technology and Communications oversees the LEDP. Data is classified into general and protected categories with corresponding controller responsibilities. Individual rights include being informed, access, rectification, erasure, and objection/opt-out.
How ConsentStack Handles This
ConsentStack applies appropriate notice and opt-out mechanisms for Laotian visitors, meeting the LEDP's requirements.
Penalties
Not publicly documented in specific amounts.
Key Requirements
- Data classified into general and protected categories
- Data controllers responsible for managing electronic data
- Individual rights: informed, access, rectification, erasure, objection/opt-out
- Foreign entities without physical presence covered
- Security measures required
Notable Provisions
- Notice-only/opt-out model — less strict than ASEAN neighbors
- One of the less developed ASEAN data protection frameworks
- Covers foreign entities without physical presence
- Limited enforcement mechanisms
Other Asia Pacific Regulations
Frequently Asked Questions
Does Laos require cookie consent?
Laos's LEDP does not mandate prior opt-in consent for cookies. It follows a notice-only/opt-out model, which is less strict than most ASEAN neighbors.
How does Laos compare to other ASEAN countries?
Laos has one of the less developed data protection frameworks in ASEAN, lacking the specificity and enforcement of laws in Thailand, Singapore, or the Philippines.
Does Laos's law apply to foreign companies?
Yes. The LEDP covers foreign entities without physical presence that handle electronic data within Lao PDR.
Stay compliant with Laos LEDP
ConsentStack helps you implement Notice consent for Laos automatically.