There is no obligation under the Electronic Transactions Law. The Regulation on Mobile Financial Services (2016) requires that any indications of loss of confidential data of the Mobile Financial Services system shall be notified to the Central Bank of Myanmar in writing no later than two business days of the event. The Cybersecurity Law requires licensed cybersecurity service providers to promptly report any cybersecurity incident to the Information Technology and Cybersecurity Department.