E-commerce Law mandated data protection rules that apply to consumer data that has been gathered over the course of electronic communication. Any business that electronically stores personal information is now obligated to establish all necessary measures to ensure that the data are reasonably protected from loss or unauthorized access, use, alteration, leaks, or disclosures. Violating the data protection obligations as defined in Chapter 11 of the E-Commerce Law, may result in a range of penalties including revocation or suspension of relevant licenses, imprisonment from one month to three years, and/or fines ranging from KHR 100,000 to KHR 10 million. For more information, see https://www.dataguidance.com/notes/cambodia-data-protection-overview