Myanmar’s New Cybersecurity Law Targets VPNs and Digital Freedoms

In a significant step to tighten control over the internet, Myanmar’s military junta enacted a controversial cybersecurity law on January 1, 2025. The new law introduces harsh penalties for individuals using VPN services without approval, along with further restrictions on digital rights and online freedoms. Under the law, citizens could face up to six months in prison and fines up to 2 million kyats (approximately $1,000) for accessing the internet through VPNs.

Why the New Law?

According to the Myanmar military, the law is intended to combat cyberattacks that threaten national sovereignty, peace, and stability. The junta claims that the law will provide a stronger framework to investigate cybercrimes and take action against unlawful online activities. However, there are far-reaching consequences of this law, particularly its potential to infringe on citizens’ online privacy, freedom of speech, and access to information.

Stricter Internet Control Since the 2021 Coup

Since the military coup in 2021, Myanmar’s internet has been under intense scrutiny and restriction. Social media platforms, independent news outlets, and international websites have been blocked in an attempt to control the flow of information. As a result, many citizens turned to VPN services as a means of bypassing these government-imposed restrictions and accessing uncensored information from around the world.

In the face of these limitations, VPNs became crucial for maintaining online communication, spreading independent news, and even organizing protests. However, with the enactment of the new cybersecurity law, the government has taken steps to curb this workaround, making it significantly more difficult for citizens to evade the government’s digital blockade.

Digital Rights Under Siege

Legal experts and digital rights advocates have expressed concerns that the new law goes far beyond cybersecurity measures. Human rights organizations, including those based in Myanmar and abroad, argue that the law is a direct attack on the fundamental rights of the people, such as privacy, free speech, and the right to information.

One legal expert interviewed by Radio Free Asia suggested that the law gives authorities excessive power over citizens’ online activities, including broad control over what can be shared, accessed, or discussed online. This overreach, they argue, is less about addressing legitimate cybersecurity threats and more about restricting independent information and silencing opposition to the junta.

The law’s implications are not limited to VPN usage. The 16-chapter, 88-article law also criminalizes activities like online fraud, illegal gambling, and unauthorized financial transactions. Violations can lead to prison sentences ranging from two to seven years, adding to the increasing legal risks associated with everyday online activity in Myanmar.

Repressive Measures Already in Place

The enforcement of the new cybersecurity law comes after months of escalating efforts by the junta to block VPN services. Back in May 2024, Myanmar’s government successfully executed a VPN ban, effectively cutting off a key tool that allowed citizens to circumvent censorship. Reports indicate that soldiers were conducting random inspections of citizens’ phones, searching for illegal VPN apps, further heightening the climate of fear.

Myanmar has also been one of the countries most affected by internet shutdowns and social media blocks. In 2024, Myanmar endured over 20,000 hours of internet disruptions, affecting nearly 24 million people. These outages not only restrict access to social media platforms but also prevent citizens from accessing vital information on health, education, and politics.

The Implications of the New Law

The new law further solidifies the junta’s grip on Myanmar’s digital landscape, with consequences that could be devastating for the country’s digital rights. For many people, using VPNs has been a way to access uncensored news, communicate freely, and engage with the global community. With the new law in place, it will be far more difficult for ordinary citizens to bypass the digital restrictions imposed by the government without facing severe legal consequences.

The tightening of internet control also stifles the flow of information, leaving the people of Myanmar in an information vacuum. Independent journalists and media organizations that rely on the internet to share news are now at greater risk of prosecution. This growing censorship only strengthens the military’s hold over the narrative, leaving the population with little recourse to challenge the government’s actions.

What Does the Future Hold?

With the new cybersecurity law in place, Myanmar is moving further toward a more controlled and censored digital environment. This is a critical moment for the people of Myanmar, as their ability to freely access information, communicate, and express dissent becomes increasingly restricted.

As the government continues to enforce stringent rules on digital activity, it’s clear that Myanmar is entering a new era of online surveillance and censorship. For citizens, the risk of prosecution for using VPNs, along with other online activities, means that their human rights are under severe threat.

The international community and digital rights organizations must continue to shed light on the situation in Myanmar, advocating for the protection of basic freedoms in the face of growing repression. The implications of this law will not only affect Myanmar’s digital landscape but could also set a dangerous precedent for other countries seeking to restrict internet freedom.