OneTrust DataGuidance confirmed, on 27 November 2019, with Jay Cohen and Pichrotanak Bunthan, Partner and Associate at Tilleke & Gibbins Ltd. respectively, that the E-Commerce Law and Consumer Protection Law had been enacted on 2 November 2019. In particular, Cohen and Bunthan highlighted, "The E-commerce Law requires a person who privately stores electronic data to establish necessary measures to ensure that the data is reasonably protected from loss, or unauthorised access, use, alteration, or disclosure. In addition, the E-commerce Law prohibits persons from electronically accessing, downloading, making copies of, obtaining, leaking, deleting, or altering data that is under the possession of another person with malicious intent or without their consent. Though the E-Commerce Law was enacted on 2 November 2019, it will only come into force on 23 May 2020."

In addition, Cohen and Bunthan noted, "The Consumer Protection Law establishes rules to guarantee the rights of consumers and to ensure that businesses conduct commercial competition in Cambodia fairly. The Consumer Protection Law applies to any person who conducts any trading activities with consumers in Cambodia, regardless of whether the trading activities are for profit, and to the sale of goods, services, and rights over immovable property. The Consumer Protection Law was enacted on 2 November 2019, and came into force on 3 November 2019."

You can read the E-Commerce Law here, and the Consumer Protection Law here, both only available in Khmer.