On January 1, 2025, Myanmar’s military junta enacted a controversial new cybersecurity law targeting VPN (Virtual Private Network) usage. Citizens who use VPN services without official approval risk up to six months in prison and fines of 2 million kyats (around US$1,000). The law, which is claimed to prevent cyberattacks and safeguard national sovereignty, is raising alarm among digital rights advocates.
While the government insists that the law is essential for combating cybercrime, critics argue it severely infringes on privacy, freedom of speech, and access to independent information.
Digital rights under attack
Myanmar’s internet freedom has been under strict control since the military coup 2021. Major social media platforms, international news outlets, and independent media have been blocked, making VPNs vital for accessing unrestricted content. The new law further tightens these controls, criminalising unapproved VPN usage.
Legal experts and human rights groups have expressed deep concern over the law’s implications. Speaking to local human rights groups, a legal expert from Mawlamyine said, “The VPN law is being misused to control public narratives. The junta seems more focused on restricting the flow of independent information than on legitimate cybersecurity concerns.”
The military regime activated the Cybersecurity Law on Wednesday, imposing up to six months in jail or 1-10 million kyats (US$475-4,750) in fines for establishing virtual private network (VPN) connections or providing VPN services without permission. #WhatsHappeningInMyanmar pic.twitter.com/4Wo6s2aOIH
— The Irrawaddy (Eng) (@IrrawaddyNews) January 2, 2025
The law spans 16 chapters and 88 articles and addresses a wide range of online activities. Beyond VPNs, it also targets online fraud, illegal gambling, and unauthorised financial transactions, with penalties ranging from two to seven years in prison.
Internet freedom faces growing challenges
The cybersecurity law’s enforcement follows years of escalating restrictions on Myanmar’s internet access. In May 2024, a Myanmar VPN ban left citizens in “online darkness.” Soldiers were reported to have inspected mobile phones for illegal VPN apps, further intensifying surveillance.
Myanmar also ranked among the nations most impacted by internet shutdowns last year. According to recent data, the country endured 20,376 hours of online blockage in 2024, affecting approximately 23.7 million people. These shutdowns cut off vital communication channels and independent news sources, leaving citizens isolated from the global community.
With the new law, Myanmar’s digital landscape has become even more perilous. Internet users face significant challenges in accessing uncensored information daily without risking legal repercussions.
Implications for the future
As digital rights advocates warn, Myanmar’s cybersecurity law represents a broader attempt to stifle dissent and maintain control over the population. By criminalising VPN usage and expanding surveillance, the junta appears to be tightening its grip on the flow of information.
The law chills digital freedom for citizens already navigating widespread censorship and surveillance. With limited avenues for secure communication, the fight for internet freedom in Myanmar becomes even more critical.
