The current, very short and limited, consultation has not allowed for the required dialogue on the proposed Cyber Security Bill. Given the broad scope of the proposed Bill and extensive powers that could significantly impact many, the proposed Bill should be properly consulted with a broad range of affected stakeholders (allowing public debate) and debated in Parliament to ensure that the law is fit for purpose and in line with the Constitution of Myanmar.

Telenor’s entry into Myanmar in 2013/14 was premised on binding commitments from the Myanmar authorities in relation to key regulations and laws that would update Myanmar’s telecom regulatory framework in line with international best practice, including respecting fundamental rights.  This includes enacting an independent telecommunications regulator and putting in place a sound Lawful Intercept framework. We refer to our previous dialogue with the Ministry of Transport and Communications and the Post and Telecommunications Department setting forth our comments and suggestions to this effect.  We are concerned that the proposed Bill does not progress relevant regulatory frameworks and law for a digital future, nor promotes and safeguards digital safety and rights.

Further, Myanmar has international obligations in relation to international agreements, treaties and international human rights law.  These obligations include respect for rule of law and good governance, and respect for the protection of human rights and fundamental freedoms.

To this end, Telenor Group outlines four key principles in relation to the proposed Bill.  We strongly object to the passing of the proposed Bill without addressing the concerns below:

• Human rights considerations: The proposed Bill must give due consideration to fundamental human rights such as freedom of speech and expression in Myanmar and personal privacy and security concerns to people in Myanmar.
• Applicability of the proposed Bill: Passing the proposed Bill during a state of emergency and granting such broad powers to a temporary administration is not appropriate.
• Execution of powers: There must be transparency, legal certainty, due process and clear criteria for the exercise of powers and interventions, independent administration and independent oversight under the proposed Bill.
• Scope of proposed Bill: The proposed Bill should not include powers which can be used to order Lawful Interception, which is covered by the Telecom Law. Further, laws governing personal data protection, electronic transactions and cyber security should be kept separate to allow for more comprehensive protection, governance and execution across all areas.