MPTC Announces Formation of a National Artificial Intelligence Ethics Council

The council is intended to advise on the ethical dimensions of artificial intelligence deployment, publish guidance on responsible use, review sensitive applications and coordinate international engagement on AI ethics.

The announcement makes clear that the council is advisory in the first instance and does not exercise regulatory powers. Its influence will depend on the quality of the guidance it publishes and the seriousness with which government and industry take it.

The council is expected to draw from academia, industry, civil society and the public sector. A diverse composition strengthens the credibility of its guidance and reduces the risk of capture by any single perspective.

Working groups on specific themes, such as AI in public services or AI in financial services, are foreseen. Sector participation in these working groups is likely to shape the direction of guidance.

The council does not replace sector regulators. Data protection, consumer protection and telecommunications regulation continue to apply to AI-supported services. The council's guidance can inform how those obligations are interpreted in the AI context.

Where guidance is adopted, it may be referenced by regulators as reflecting good practice, even without formal legal weight.

Businesses developing or deploying AI systems should track the council's early outputs and consider whether their internal governance reflects the emerging expectations.

Documented internal AI governance — inventory, risk assessment, human oversight, incident response — is likely to become a baseline expectation more quickly than formal legislation.

The AI ethics council formation sits within Cambodia's broader telecommunications legal framework, principally the Law on Telecommunications (2015), the sub-decrees on licensing and spectrum management, and successive Prakas issued by the Ministry of Posts and Telecommunications and the Telecommunication Regulator of Cambodia.

Where a specific instrument has not yet been formally adopted, operators should read announcements together with existing licence conditions, general regulatory duties and international commitments Cambodia has undertaken through the ITU and ASEAN.

Because ministerial and regulatory instruments in Cambodia are frequently updated, compliance teams should not rely on a single Prakas in isolation but should trace the underlying legal basis and any amending texts before assuming a rule applies.

Cambodia-licensed mobile network operators, fixed operators, internet service providers, tower and passive-infrastructure providers, satellite and VSAT operators, equipment importers and vendors, enterprise connectivity buyers and investors evaluating market entry should all monitor the AI ethics.

Foreign companies providing cross-border digital services to Cambodian customers should also assess whether their commercial model creates a nexus that brings them within scope, even if they do not hold a Cambodian licence.

Group companies with a Cambodian subsidiary should ensure that head-office compliance policies are localised and do not simply mirror requirements from another jurisdiction, as Cambodian requirements often differ in detail even where the overall policy objective is similar.

Operators should map current internal practices against the direction of the AI ethics council formation and identify areas where documentation, disclosures, contracts, technical measures or governance need to be strengthened.

A written internal impact assessment — capturing which business lines are affected, which teams own each obligation, and what evidence would be produced in a regulator inspection — is a low-cost step that materially improves readiness.

Where obligations are not yet in force, boards and executive committees should be briefed on likely direction of travel so that budget cycles, procurement decisions and vendor contracts already reflect anticipated requirements rather than being retrofitted later at higher cost.

The AI ethics council formation does not operate in isolation. Companies should consider how it intersects with data protection expectations, cybersecurity obligations, consumer-protection rules, tax and foreign-exchange controls, and — where relevant — sectoral rules for banking, e-commerce or critical infrastructure.

Contracts with vendors, roaming partners, tower companies, cloud providers and interconnection counterparties should be reviewed to allocate responsibility and cost for any additional obligations that arise.

For groups operating in multiple ASEAN jurisdictions, alignment with regional peers can reduce friction, but Cambodia-specific carve-outs are usually required rather than a purely regional template.

The regulatory calendar in Cambodia often compresses between announcement and effective date. Operators that wait for a formally adopted text before starting work frequently find themselves with only weeks to implement changes that require quarters of preparation.

Legal and compliance teams should establish a monitoring routine covering MPTC and TRC official channels, the Royal Gazette, and industry association updates, and should record the date each new document is reviewed together with a short internal note on its impact.

Where uncertainty remains, engaging early with the regulator through industry associations or bilateral technical meetings is usually more effective than waiting for enforcement action to clarify the intended interpretation.

Lex Civora advises Cambodia-licensed operators, foreign investors and vendors on the practical implications of the AI ethics, including gap analyses against existing licence conditions, drafting of internal policies and customer-facing documentation, and structured engagement with MPTC and TRC.

For matters that touch adjacent regimes — data protection, cybersecurity, consumer protection, tax and foreign investment — we coordinate with specialist counsel so that the client receives a single integrated compliance view rather than fragmented advice.

Where a matter is time-sensitive, we can deliver a focused risk brief within a short timeframe to inform board or investment-committee decisions while the full compliance workstream is being scoped.