Cambodia

All Internet Traffic Now Passes Through a Single Government Chokepoint

Cambodia's most consequential privacy development is architectural: the National Internet Gateway requires all internet traffic in the country to be routed through a regulatory body charged with monitoring online activity before it ever reaches users. UN human rights experts have described the decree as repressive, warning that it permits the government to monitor internet activity, intercept and censor digital communications, and collect, retain, and share users' personal data — all through a single centralized checkpoint rather than a distributed system that would be far harder to monitor comprehensively.

There Is Still No Data Protection Law to Limit What Gets Collected

Cambodia's gateway system operates in a near-total legal vacuum when it comes to protecting the data it collects. Cambodia has not yet enacted comprehensive cybersecurity and data protection legislation, and in the absence of any law that would protect internet users from misuse of their data, the National Internet Gateway will facilitate authorities' ability to identify users' internet activities and habits — with no legal certainty about where that data is stored, how long it's retained, or who ultimately has access to it. A promised Personal Data Protection Law has remained in draft form for years, with no confirmed timeline for passage.

A New Cybercrime Law Could Criminalize Ordinary Online Speech

Alongside the surveillance infrastructure, Cambodia has advanced legislation that directly targets what citizens say online. The latest draft of the Law on Cybercrime criminalizes a range of online speech, including defamation, insults, and technology-related abuse, with penalties reaching up to two years in prison for causing "grievous harm" through technology-facilitated communication. Rights groups have specifically warned this creates real risk for ordinary online expression, not just malicious cyberattacks — a concern sharpened by survey data showing 64% of Cambodian journalists already practice self-censorship due to the broader political and surveillance environment.

Cambodians Are Already Turning to Encrypted Apps in Response

Facing this environment, many Cambodians have adapted their own habits directly. Responding to heightened surveillance, Cambodians have increasingly turned to encrypted applications such as WhatsApp to communicate — a trend that extends even to government officials themselves, who have also increasingly adopted encrypted messaging for their own communications. This grassroots shift reflects a widely shared understanding that ordinary, unencrypted communication in Cambodia isn't private by default.

What Users in Cambodia Should Do Right Now

A VPN encrypts your internet traffic before it reaches Cambodia's National Internet Gateway, making your browsing activity unreadable at the exact centralized checkpoint the gateway was built to monitor — one of the most direct and practical countermeasures available given the country's infrastructure. Choose a VPN with a verified no-logs policy, strong AES-256 encryption, and obfuscation features that disguise VPN traffic as ordinary browsing, since gateway operators have broad authority to take "any actions deemed necessary" against traffic they can identify. Pair it with end-to-end encrypted messaging apps like WhatsApp or Signal for sensitive communications, following the same pattern many Cambodians and even government officials have already adopted, and be cautious about discussing political topics online given the draft Cybercrime Law's broad criminalization of "insults" and "defamation."

VPN Legality Is Ambiguous — But Not Explicitly Banned

Cambodia is grouped among countries with various forms of internet censorship and ambiguous VPN legality — personal use is generally not prosecuted, but politically sensitive use carries real risk. There's no explicit law banning VPNs, but the country's regulatory direction is unmistakable. This guide is purely informational, not legal advice — the situation here is genuinely still developing.

Watch This: Cambodia's National Internet Gateway

Cambodia's government has resurrected its long-delayed National Internet Gateway under Prime Minister Hun Manet, with a May 2025 planning document naming state-owned Telecom Cambodia and MPTC as responsible for infrastructure work starting in 2026. If implemented, it would require all of Cambodia's internet traffic to route through a single, government-controlled chokepoint — UN rights experts have called the plan repressive and warned it would allow authorities to arbitrarily switch off access or block specific websites and domains.

What's Already Being Blocked

The direction is already visible in practice. In June 2026, Cambodia blocked Discord and Patreon in a wider website ban, part of a broader crackdown on online scam operations — notably, Telegram remained widely accessible even as it hosts some of the very scam-related marketplaces investigators have identified. This kind of selective, shifting blocking is exactly the pattern a UCN VPN is built to route around.

What to Look For in a UCN VPN for Cambodia

Given the uncertain trajectory of the National Internet Gateway and the pattern of specific platform blocks, obfuscation is a smart precaution rather than overkill. Look for a UCN VPN with stealth protocols and ChaCha20-Poly1305 or WireGuard® encryption, combined with an independently audited no-logs policy — a provider based entirely outside Cambodia offers the strongest protection if the gateway project moves forward as planned.

Getting Started in Under a Minute

Download the UCN VPN app, sign in, and tap Connect — your traffic is encrypted immediately. Given how quickly Cambodia's blocking patterns have shifted and the National Internet Gateway's uncertain but real timeline, setting up and testing a UCN VPN now — while the situation remains fluid — is the smart move.

Cambodia's internet freedom is genuinely at a crossroads right now. A UCN VPN keeps you prepared for whichever direction the National Internet Gateway ultimately takes.