Cambodia

AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.

Instruments

Enacted

Proposed / in discussion

low

Confidence

Summary

Cambodia has minimal crawling-specific legal infrastructure. No comprehensive data protection law has been enacted. A Law on Personal Data Protection (LPDP) final draft (dated 23 June 2025) was published on Open Development Cambodia but had not been promulgated as of the as_of_date; the two-year implementation window was intended to begin on promulgation. The Criminal Code Arts. 427-432 address information-technology offences including illegal access, data interference, and system interference, providing a general-law basis for computer-misuse claims. A Law on Combatting and Preventing Cybercrime (No. 61/NA, 2015) and a Law on Anti-Technology Fraud (enacted April 2026 by the National Assembly) exist but are focused on fraud, scams, and national-security content rather than scraping. No TDM copyright exception and no database right. Thin enforcement history means posture is highly uncertain — classified as minimal/unclear with general criminal-law overlay. Human review required until the LPDP is promulgated and its text is confirmed.

Automated-access legality

Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.

Dimension	Value
Authorization test	unsettled
Public-page carve-out	unsettled
Terms-of-service browsewrap enforceable	unsettled
Terms-of-service clickwrap enforceable	unsettled
Copyright exception model	closed list
Text and data mining — commercial status	prohibited
Text and data mining — opt-out mechanism	none
robots.txt legal weight	non binding notice
AI training-specific law	none
Privacy regime	none (LPDP final draft 23 June 2025, not yet promulgated as of as_of_date)
Trespass to chattels	not recognized

Last reviewed: 2026-05-24. Confidence: low. Fast-moving area — verify before relying. Not legal advice.