Law: There is no general personal data protection law.

Regulator: There is no general data protection authority.

Summary: While Papua New Guinea does not have a personal data protection law, the Cybercrime Code Act 2016 ('the Act') contains provisions relevant to cybersecurity and aspects of data protection. The Act, and cybersecurity more generally, is regulated by the National Information & Communications Technology Authority ('NICTA'). Legislative developments in Papua New Guinea are often influenced by events and practices in Indonesia and Australia, as well as the Association of South East Asian Nations ('ASEAN').