The Cyber Security Law imposes stringent regulations on domestic and international platforms,
including global giants like Facebook, granting the military expansive control over social media.
While enforcing these provisions on foreign platforms may be challenging, the law provides
legal grounds for blocking or banning non-compliant platforms, facilitating censorship and
arbitrary enforcement.
Platforms with over 100,000 users, whether local or foreign, must obtain a licence valid for
three to 10 years (Arts. 24, 19). Licence approvals are managed by a government department,
with appeals adjudicated by a military-controlled committee, bypassing judicial oversight (Arts.
25, 57-59). Although the military has removed an earlier requirement for platforms to host data
on government-designated servers (2022v Art. 36.a), the law still empowers authorities to
inspect, suspend, take over, or ban platforms on vague grounds, often citing cybersecurity as a
pretext for arbitrary actions (Arts. 42, 43a-c).
Additionally, platforms must identify, monitor, and remove content vaguely defined as
disrupting “peace”, spreading “rumours”, disclosing “unsuitable” information, or inciting
“terrorism”, which is code in Myanmar for pro-democratic opposition groups (Arts. 31a-g).
Severe penalties for non-compliance, including blocking, grant the military sweeping powers to
control online platforms, undermining freedom of expression and enabling the arbitrary
restriction of platforms that resist its demands (Art. 52).