Myanmar
Myanmar Recording Laws: Privacy Rules and Penalties (2026)

Myanmar has no statute that sets a one-party or all-party consent rule for recording a conversation. Every interception law on the books targets the state's own surveillance powers, not private recording, and the one statute that limited those powers has been suspended, not repealed, since 2021.
No Statute Sets a Consent Rule for Recording
No Myanmar law identified in this research, not the Telecommunications Law, not the Penal Code, not any other statute, defines a one-party or all-party consent rule for a private individual recording a conversation they are part of. Every interception provision found is drafted around the state or a telecom network, not around private individuals recording each other. That silence is the finding here, not a research gap papered over with a guess.
Readers comparing Myanmar to jurisdictions with an explicit consent rule, such as Thailand, India, or Indonesia, all covered on Recording Law's world recording laws hub, should not expect Myanmar to fit the same one-party/all-party framework. It does not, because no statute puts it there.
What This Page Could Verify, and What It Could Not
Every statutory claim below rests on paraphrase from human rights organizations, law firms, or media reporting, not on verbatim primary text. Attempts to reach Myanmar's official legislation repositories returned access errors: burmalibrary.org's full-text copy of the Telecommunications Law returned an HTTP 403 error, as did article19.org's Myanmar resource page and a Library of Congress Global Legal Monitor article on a 2017 telecom-law amendment. PDF copies obtained from Free Expression Myanmar and a law-firm archive were unreadable scanned images rather than searchable text.

Where a claim below comes from a human rights organization's documentation or a law firm's client alert, the prose says so directly. None of it should be read as this page having confirmed the underlying statutory wording against an official source.
The State's Interception Powers Are Broad and Warrant-Free
Free Expression Myanmar's documentation of the Telecommunications Law (Law No. 31/2013) reports that section 75 authorizes the government to direct 'relevant organisations' to intercept information or communications that may adversely affect national security, with no stated warrant or judicial-oversight requirement. The Global Network Initiative's country review reports that section 77 lets the Ministry of Communications and Information Technology direct a licence holder to intercept communications, or halt a network or service, when the government deems it in the 'public interest,' a term the law leaves undefined. The same review reports that section 78 separately requires licensees to build interception capability into their networks so telecom services can be used for security matters, and that section 17's confidentiality duty on carriers carries an exception for disclosures allowed by existing laws, broad enough to cover the interception sections above it.
Access Now's documentation of by-laws issued in March 2023 under the Counter-Terrorism Law (section 14, articles 79 through 85) describes the State Administration Council-chaired Central Committee for Counter Terrorism as empowered to order interception, blocking, and restriction of mobile and electronic communications, verify location data, and compel network providers to disclose communications and network records. These 2023 by-laws are treated here as a distinct instrument from a separately reported 2021 Anti-Terrorism Law amendment that some search results conflated with them; this page describes only the sourced 2023 by-laws.
None of these provisions describes, permits, or restricts a private individual recording their own conversation. They describe the state's own tools for reaching into communications generally.
A Privacy Law That Was Suspended, Not Repealed
The Law Protecting the Privacy and Security of Citizens (2017) is the one statute reported to have given ordinary citizens a right against warrantless government intrusion. A law-firm analysis by Tilleke & Gibbins describes the law's section 8 as originally prohibiting authorities from intercepting communications, demanding telecom or electronic communications data from operators, or disturbing a citizen's communication with another person without judicial authorization.
Human Rights Watch's documentation of Myanmar's post-coup legal changes reports that sections 5, 7 and 8 of that law were suspended, not repealed, by the State Administration Council on 13 February 2021, under Article 420 of the 2008 Constitution. The suspension removed the witness requirement for searches, the 24-hour judicial detention limit, and the warrant requirement for surveillance and interception. The distinction between suspended and repealed matters: a suspended provision remains on the books and could in principle be reinstated, while its practical effect since 13 February 2021 has been the same as if it had been struck out entirely.
The Real Risk Is What Happens After You Record
The research behind this page found no law addressing whether making a recording is itself lawful. What is documented, repeatedly, is the risk attached to sharing, discussing, or publishing one. Human Rights Watch reports that Penal Code section 505A, inserted 14 February 2021, criminalizes statements that cause fear, spread false news, or incite an offence against a government employee, and identifies it as the primary charge used against journalists, activists, and civilians who record, film, or share footage critical of the military; it carries up to 3 years imprisonment.

A separate amendment made one day later, on 15 February 2021, added section 38(b) to the Electronic Transactions Law, criminalizing obtaining, disclosing, using, destroying, modifying, or disseminating personal data without approval, punishable by 1 to 3 years imprisonment, and section 38(c), criminalizing online misinformation or disinformation intended to cause public panic, punishable by 1 to 3 years imprisonment plus fines, according to the same Human Rights Watch reporting. Separately, Free Expression Myanmar's documentation of the Telecommunications Law reports that section 66(d) criminalizes using a telecommunications network to defame or disturb another person, among other listed acts, punishable by up to 3 years imprisonment.
These three provisions, Penal Code section 505A, Electronic Transactions Law section 38(b) and (c), and Telecommunications Law section 66(d), are speech-suppression tools aimed at what a person does with a recording after making it. None of them regulates how the recording was made, and none should be mistaken for a recording-consent rule.
The 2025 Cybersecurity Law Adds Data Retention and a VPN Restriction
Myanmar's Cybersecurity Law No. 1/2025 was enacted 1 January 2025 and took effect 30 July 2025 under State Administration Council Notification 113/2025, according to a Tilleke & Gibbins client alert. Reporting from Radio Free Asia states the law does not criminalize personal VPN use itself, but criminalizes unauthorized or unlicensed provision of a VPN service, punishable by 1 to 6 months imprisonment and/or a fine of MMK 1 to 10 million.
Human Rights Myanmar's documentation of the law reports that it mandates digital platform and cybersecurity service providers retain user data, including names, phone numbers, IP addresses, and browsing logs, for up to 3 years, and disclose it to authorities on demand, with no stated judicial-warrant requirement.
Practical Realities on the Ground
Human Rights Myanmar's documentation of digital surveillance reports that authorities conduct random street and checkpoint phone searches, and that people have been arrested for simply possessing photos of protests or having a VPN app installed. That practice sits alongside, and arguably matters more in daily life than, any formal statute: a checkpoint search that turns up a recording is a documented event, even where no law was found stating whether making that recording was itself permitted or forbidden.
Penalties at a Glance
| Offence | Sanction | Statute |
|---|---|---|
| Defaming or disturbing a person via a telecommunications network | Up to 3 years imprisonment | Telecommunications Law s.66(d) |
| Unauthorized obtaining, disclosure, or dissemination of personal data online | 1 to 3 years imprisonment | Electronic Transactions Law s.38(b) (2021 amendment) |
| Online misinformation causing public panic | 1 to 3 years imprisonment plus fines | Electronic Transactions Law s.38(c) (2021 amendment) |
| Statements causing fear, spreading false news, or inciting an offence against a government employee | Up to 3 years imprisonment | Penal Code s.505A |
| Unauthorized or unlicensed provision of a VPN service | 1 to 6 months imprisonment and/or MMK 1 to 10 million fine | Cybersecurity Law No. 1/2025 |
| General cyber misuse | 6 months to 3 years imprisonment, MMK 1 to 20 million fine | Cybersecurity Law No. 1/2025 |

What This Article Could Not Establish, and Where Care Is Needed
Beyond the sourcing limits described above, no statute or regulation specifically governing CCTV or video surveillance was located, and no source addresses the recording of police or military personnel.
On that last point the absence of a rule is close to beside the point. Human rights documentation records random street and checkpoint phone searches, and arrests for nothing more than having photographs of protests, or a VPN application, stored on a handset. The question that decides what happens to someone in Myanmar is not whether a recording was lawfully made. It is whether the footage is found, and what is done with it afterwards. Treat recording, retaining and sharing as three separate risks, and assume the second and third are the more dangerous ones.
Where no authority could be located, that is a statement about what is findable in public sources, not a conclusion that the conduct is permitted or prohibited. Anyone facing a specific situation should take advice from a lawyer licensed in the jurisdiction.
This article provides general legal information about Myanmar and is not legal advice. Much of the statutory detail above could not be verified against official primary text; it rests on documentation from human rights organizations, law firms, and media reporting, as noted throughout. Information was compiled as of July 27, 2026. Consult a lawyer licensed in Myanmar before recording a conversation, sharing a recording, or relying on any of the provisions described here.
Frequently Asked Questions
Is it legal to record a conversation in Myanmar without the other person's consent?
No Myanmar statute addresses this question directly. Every interception law found in this research targets the state's own surveillance powers or a telecom network, not a private individual recording a conversation they are part of. That absence is the honest answer; it is not a one-party or all-party consent rule in disguise.
Can the Myanmar government intercept phone calls without a warrant?
Reporting on the Telecommunications Law describes sections 75 and 77 as letting the government and the telecom regulator order interception for national security or 'public interest' reasons, with no stated warrant requirement. By-laws issued under the 2023 Counter-Terrorism Law reportedly extend similar interception powers to a state security committee.
What happened to the law that required a warrant for surveillance in Myanmar?
The Law Protecting the Privacy and Security of Citizens (2017) required judicial authorization for interception under its section 8. Human Rights Watch reports that section, along with sections 5 and 7, was suspended, not repealed, by the State Administration Council on 13 February 2021. A suspended law remains on the books but is not currently in effect.
What is the biggest legal risk of sharing a recording in Myanmar?
Based on the sources reviewed for this page, the risk sits in what a person does with a recording after making it, not in the recording itself. Penal Code section 505A, Electronic Transactions Law section 38(b) and (c), and Telecommunications Law section 66(d) have all been used to prosecute people over online statements, shared footage, and disseminated data, with documented penalties of up to three years for Penal Code section 505A and Telecommunications Law section 66(d), and one to three years plus fines for Electronic Transactions Law section 38(b) and (c).
Is using a VPN illegal in Myanmar?
Reporting on the Cybersecurity Law No. 1/2025 states that personal VPN use is not itself criminalized, but that providing a VPN service without authorization or a license is, punishable by 1 to 6 months imprisonment and/or a fine of MMK 1 to 10 million. Human rights documentation separately reports that people have been arrested at checkpoints simply for having a VPN app installed on their phone.
Updates
Independently fact-checked against the cited primary sources
Sources and References
- Free Expression Myanmar's documentation of the Telecommunications Law (2013), covering section 75's national-security interception power and section 66(d)'s penalty for defaming or disturbing a person via a telecom network.(freeexpressionmyanmar.org)
- The Global Network Initiative's Myanmar country review, covering Telecommunications Law sections 77 (interception in the 'public interest'), 78 (interception-capability mandate on licensees), and 17 (confidentiality exception).(clfr.globalnetworkinitiative.org)
- Tilleke & Gibbins' analysis of the Law Protecting the Privacy and Security of Citizens (2017) section 8's original judicial-authorization requirement for interception.(www.tilleke.com)
- Human Rights Watch's documentation of Myanmar's post-coup legal changes, covering the 13 February 2021 suspension of Privacy Law sections 5, 7 and 8, the 2021 Electronic Transactions Law amendment (s.38(b)/(c)), and the insertion of Penal Code section 505A.(www.hrw.org)
- Tilleke & Gibbins' client alert on Cybersecurity Law No. 1/2025, covering its enactment, its 30 July 2025 effective date, and its general cyber-misuse penalty range.(www.tilleke.com)
- Radio Free Asia's reporting on the Cybersecurity Law's VPN provision, distinguishing personal VPN use from unlicensed provision of a VPN service.(www.rfa.org)
- Human Rights Myanmar's documentation of the Cybersecurity Law's data-retention mandate on digital platform and cybersecurity service providers.(humanrightsmyanmar.org)
- Human Rights Myanmar's documentation of checkpoint phone searches and arrests over protest photos or VPN apps.(humanrightsmyanmar.org)
- Access Now's documentation of the March 2023 Counter-Terrorism Law by-laws (section 14, articles 79-85) empowering the Central Committee for Counter Terrorism to order interception and communications-data disclosure.(www.accessnow.org)