You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

July 28, 2023

Myanmar Requires Registration of Online Retail Businesses

Subscribe to Updates

Myanmar’s Ministry of Commerce (MOC) issued three notifications related to e-commerce on July 21, 2023, classifying online retail businesses as essential services, requiring them to register with the relevant authorities, and setting the criteria for their registration.

Under Notification No. 49/2023 the MOC authorized the Department of Trade (DOT) to issue notifications, orders, and directives relating to online retail businesses.

This was followed by Notification No. 50/2023, which classifies online retail businesses as essential services under the Essential Supplies and Services Law and requires them to register with the DOT within six months of the issuance of the notification (i.e., by January 21, 2024). Failure to register within the specified period will be punishable by imprisonment for six months to three years and a fine of up to MMK 500,000 (approx. USD 238).

Finally, under Notification No. 51/2023, the MOC set out the criteria and requirements for the registration of online retail businesses by entities, business institutions, and individuals, as well as the duties and liabilities of sellers and consumers.

Pursuant to this notification, registration should be completed via the DOT’s online system, fees must be paid digitally, and electronic registration certificates will be issued. Certificates are initially valid for two years, and can be renewed. The MOC will provide information at a later time on the prescribed forms, certificate format, registration and online fees, and online registration portal.

In applying for registration, an entity or business institution established under the Myanmar Companies Law, Special Company Act, Co-operative Society Law, or any other existing Myanmar laws must have a website with its own domain name or an online channel with an exact address that is used for online sales and a registered business address within Myanmar. Individual applicants must be at least 18 years old, reside in Myanmar, and provide a business operating address within the territory of Myanmar.

Sellers must disclose which items they sell on the registration system; these can be amended post-certification. Applicants must have any necessary relevant government licenses/permits for the items.

To verify the business operating address, the DOT will conduct an onsite visit before issuing a registration certificate. The DOT can refuse issuance if the business fails to meet the criteria prescribed in the notifications. If an application is rejected, the applicant may amend and resubmit it within 30 days. If a certificate holder does not comply with its duties and liabilities, the DOT can suspend or revoke the certificate.

[Update September 29, 2023:

The MOC is accepting applications to register online retail businesses from October 2, 2023, through its online registration platform. Applicants need to provide their name and logo along with recommendation letters from both the ward administration office and the police station of the township where the business address is.

There is no registration fee for registering by the end of December 2023; however, the application fee, inclusive of online transaction fees, is MMK 3,900 (approx. USD 1.8). The registration fee is not yet specified. For further details, please see our article about Myanmar’s guidelines for e-commerce businesses.  

After six months from the issuance of Notification 50/2023, the MOC will take action against unregistered e-commerce businesses in accordance with the Essential Supplies and Services Law.]

Related Professionals

Industries

Consumer Products

Technology

Practices

Corporate/M&A

Location

RELATED INSIGHTS​ 

April 30, 2026
Vietnam’s Decree No. 134/2026/ND‑CP, which took effect on 9 April 2026, plays an important role in detailing and implementing Vietnam’s Intellectual Property (IP) Law in the context of rapid digital transformation and the growing application of artificial intelligence (AI). The new decree provides comprehensive guidance on the application of copyright and related‑rights regulations, addressing key issues such as authorship, ownership, statutory exceptions and limitations, registration procedures, and enforcement mechanisms. Through these measures, Decree 134 seeks to achieve an appropriate balance between safeguarding the legitimate interests of rightsholders and fostering innovation, research, and technological advancement, thereby strengthening the state’s framework for the effective management, protection, and exploitation of intellectual property in the digital and AI‑driven environment. Some notable aspects of Decree 134 are discussed below. Copyright for AI-Created Works Decree 134 provides important guidance on the determination of copyright and related rights in works created with the assistance of AI. Article 5a reaffirms the principle that human creativity remains central to copyright protection, clarifying that copyright or related rights arise only where a human makes a substantial and decisive intellectual contribution, exercises effective control over the creative outcome, and assumes responsibility for the content and its legality. At the same time, the provision confirms that AI is regarded solely as a technological tool rather than a rights‑holding subject, thus ensuring consistency with the fundamental concepts of authorship and ownership under the IP Law. By introducing requirements on transparency, proof of human contribution, and compliance with AI‑specific labelling and technical marking obligations, Decree 134 establishes a clear and enforceable legal framework for the responsible use of AI in creative activities. Lawful Use of Copyrighted Texts and Data Article 37a of Decree 134 sets out the specific conditions under which copyrighted texts and data may be lawfully used for scientific research, experimentation,
Read More
April 23, 2026
Vietnam has progressively positioned blockchain as a strategic technology within its broader digital transformation agenda over the past decade. From early policy orientations to more recent legislative developments, the regulatory approach has gradually shifted from high-level recognition to more concrete legal integration. Against this backdrop, a new draft decree regulating activities relating to product and goods identification, authentication, and traceability (the “Draft Decree”) marks a notable turning point. Rather than merely referencing blockchain as a policy priority, the Draft Decree incorporates blockchain directly into a nationwide regulatory system, positioning it as part of the underlying infrastructure for data governance and public administration in relation to the management, verification, and traceability of product-related data. Evolution of Vietnam’s Blockchain Legal Framework: The Draft Decree in Context Vietnam’s blockchain legal framework has developed in several distinct phases. The first phase, beginning around 2019, was characterized by high-level policy recognition in several resolutions of the Party Central Committee. Particularly, blockchain was identified as part of the broader category of digital technologies critical to industrial modernization and participation in the Fourth Industrial Revolution. These resolutions did not regulate blockchain directly, but established its strategic importance at the national level. The second phase (2023 to 2025) saw the introduction of national strategies and technology policies that more explicitly recognized blockchain as a priority technology. Those policies collectively signaled a clear policy commitment to developing blockchain infrastructure and applications. However, these instruments remained largely at a policy-level and did not establish binding regulatory frameworks. The third phase (from 2025) involves the gradual integration of blockchain into sectoral legislation. Laws such as the Law on Digital Technology Industry (2025), the Law on Personal Data Protection (2025), and the Law on Science, Technology, and Innovation (2025) have introduced concepts such as digital assets, crypto assets, and even specific
Read More
April 22, 2026
A new decree in Vietnam brings significant implementation clarity to the country’s existing extended producer responsibility (EPR) legal framework. An EPR mechanism was first codified in Vietnam in the 2020 Law on Environmental Protection amid ongoing challenges surrounding the collection and treatment of product and packaging waste. The mechanism was progressively detailed through Decree No. 08/2022/ND‑CP and its successive amendments, but the regulatory framework remained insufficiently developed, notably in terms of support mechanisms for waste collection, recycling, and treatment. The newly launched regulations in Decree No. 110/2026/ND-CP (Decree 110), issued on April 1, 2026, and taking effect on May 25, 2026, stipulate fully and clearly the responsibility of manufacturers and importers to recycle products and packaging and to treat waste. Some key provisions of Decree 110 for manufacturers, importers, and related stakeholders are presented below. Subjects of EPR The Law on Environmental Protection assigns responsibility to manufacturers and importers for product and packaging recycling (under Article 54) or waste collection and treatment (under Article 55), depending on the type of products and packaging they produce or import. Decree 110 elaborates on these EPR provisions by specifying the responsible entities and listing out the types of products and packaging subject to recycling and waste treatment responsibilities. Decree 110 clarifies the responsible entities in special cases, such as when products under the same brand are made by multiple manufacturers, when there is a contract manufacturing or entrusted import relationship, and when the manufacturer or importer is part of a corporate group. Notably, exemptions may be applied in some scenarios, such as for manufacturers and importers of products and packaging exclusively for export, temporary import and re-export, or research and testing purposes, as well as for entities with annual revenue from related products not exceeding VND 30 billion. Recycling Responsibilities Decree 110
Read More
April 21, 2026
Thailand’s Personal Data Protection Committee (PDPC) has launched a public consultation period on a draft notification setting out criteria for data subject access requests (DSARs). The draft notification addresses practical uncertainties in handling DSARs by introducing standardized procedural requirements for data controllers. The consultation period runs from April 16 to May 15, 2026. The notification will enter into force 30 days from the date of its publication in the Government Gazette. Key Features of the Draft Notification The draft notification covers the following key areas: Scope of information subject to access. Data controllers must enable data subjects to access at least the following upon request: (1) personal data collected directly from them; (2) personal data obtained from other sources; and (3) the source of personal data obtained from other sources without consent. Information required under section 23 of the PDPA and information that must be recorded pursuant to section 39 of the PDPA—such as the categories of personal data collected and purposes of processing—must also be made available. Submission channels and formal requirements. Data controllers must provide at least in-person and postal channels for DSARs, while electronic or other channels are optional. Requests may be made either directly by the data subject or through an authorized representative, and must be signed and include sufficient identifying information, a preferred response method, and DSAR details. Identity verification documents (and proof of authority if the request is through a representative) are required, and additional documentation may be requested for verification or communication purposes. Data controllers may use different verification methods for DSARs submitted via electronic or other channels, provided this does not create undue obstacles to the exercise of data subject rights. Verification and response timelines. Data controllers must complete preliminary verification within seven business days of receiving a request. If a
Read More