Episode 1 – Lao PDR’s Data Center Moment
What is Data Center?
A data center is a secure facility that houses critical IT infrastructure, including servers, storage systems, and networking equipment, to support digital services and computing operations. It may enable services such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), colocation (rental of physical space for server placement), server hosting, capacity leasing, software services, and database services. In accordance with fundamental data center principles, a properly designed facility provides reliable power infrastructure, including backup and redundancy systems, redundant cooling systems, physical and cybersecurity controls, and disaster recovery capabilities.
Accordingly, a data center is not merely a physical space for servers, but an engineered environment designed to ensure availability, resilience, security, and operational continuity.
Regulations for Data Centers in Lao PDR
The Lao PDR has recognized the importance of information and data management since 2016[cite: 1]. As present, three key legislative instruments governing digital technology businesses and data center management have been promulgated:
- Law on Information and Communication Technology, No. 02/NA, dated 7 November 2016;
- Decree on Internet Data Center, No. 412/PM, dated 10 November 2016; and
- Decision on the Operation of Digital Technology Businesses, No. 3643/MPT, dated 29 September 2025
Pursuant to Article 5 of the Decision on the Operation of Digital Technology Businesses (2025), digital technology businesses are classified into 14 categories, including data center and cloud services[cite: 1]. The Decision defines a data center as a centralized technical infrastructure system comprising the systems and equipment necessary to provide services such as leasing space for equipment installation, leasing server racks, leasing server capacity, leasing software, leasing database services, and other related services.
Regulatory Authority
The operation of data center businesses (including other digital technology businesses, such as cloud service providers) was formerly regulated by the Department of Information Technology under the Ministry of Post, Telecommunications and Communication.
In 2021, the Ministry of Post, Telecommunications and Communication underwent an institutional restructuring to form the Ministry of Technology and Communications[cite: 1]. As a result, the regulatory oversight of digital technology businesses was transferred to the Department of Digital Technology, which is now responsible for this oversight.
Data Center Classification Standards
Data center under Lao laws are classified into 4 types, aligned with the Tier Classification standards established by the Uptime Institute, as described below.
Type 1 (Tier IV - Fault Tolerant)
- Provides fully redundant and independent power and cooling systems with dual active distribution paths;
- Designed to be fault tolerant, allowing continuous operation during component failures or maintenance;
- Suitable for mission-critical operations (e.g., financial institutions, healthcare facilities, and government data centers);
- Typical uptime: 99.995%;[cite: 1]
- Maximum annual downtime: approximately 26.3 minutes per year.
Type 2 (Tier III - Concurrently Maintainable)
- Provides multiple power and cooling distribution paths, with only one active at a time;
- All critical components are redundant, enabling maintenance without service disruption;
- Suitable for enterprise-level operations requiring high availability;
- Typical uptime: 99.982%;
- Maximum annual downtime: approximately 1.6 hours per year.
Type 3 (Tier II - Redundant Capacity)
- Provides a single distribution path for power and cooling, with redundancy in critical capacity components (e.g., N+1);
- Limited component-level redundancy, though single points of failure remain within the distribution path;
- Suitable for small to medium-sized organizations requiring enhanced reliability;
- Typical uptime: 99.741%;
- Maximum annual downtime: approximately 22.7 hours per year.
Type 4 (Tier I – Basic Capacity)
- Provides basic infrastructure with a single path for power and cooling distribution;
- No redundancy across critical system components;
- Suitable for non-critical operations where limited downtime is acceptable;
- Typical uptime: 99.671%;
- Maximum annual downtime: approximately 28.8 hours per year.
Episode 2 – Invest in Data Centers in Lao PDR : Why and How
Foreign Ownership Restrictions
Data center service is not categorized as controlled businesses or concession activities under Lao laws[cite: 1]. In addition, foreign investors are entitled to own and operate a Data Center business with up to 100% foreign ownership[cite: 1]. Nevertheless, prior to commencing operations, investors must obtain the relevant business operating license from the competent authority overseeing the technology and communications sector.
Key Conditions for Investment in Data Center Service
In addition to submitting a complete application dossier and all required supporting documents in accordance with the applicable regulatory requirements, the key business conditions for the establishment of data center services include the following:
General Key Conditions
- The data center company must be duly registered in the Lao PDR and possess adequate storage facilities, transportation means, and operational equipment appropriate to the scale and nature of its business activities;
- The company must have sufficient registered capital, and qualified personnel and specialists with knowledge and expertise appropriate to the size and scope of the business.
Site Standards and Technical Standards
- The data center must be located in a suitable, non-congested area with adequate access for fire emergency vehicles, and must comply with TIA-942 or other internationally recognized equivalent standards.
- Also, the data center must satisfy applicable technical requirements, including those relating to network connectivity, data storage systems, equipment specifications, network layout design, and system upgrade capability and scalability to support future expansion.
Security Standards
- The facility must be equipped with access control systems, CCTV surveillance, operational monitoring systems, fire alarm and fire suppression systems, cyberattack protection systems, and data filtering systems.
- Data protection measures must comply with internationally recognized information security management standards, such as ISO/IEC 27001.
Data Center Service Business Operating License
Data Center Service Business Operating License is categorized into 4 data center types. Each type is subject to a two-phase licensing process, as follows:
- Phase 1: A temporary license valid for 1 year and renewable.
-
Phase 2: A full (definitive) license with the
following validity periods:
- Type 1 (Tier IV) and Type 2 (Tier III) valid for 5 years and renewable;
- Type 3 (Tier II) and Type 4 (Tier I) valid for three (3) years and renewable.
An application for renewal of the Data Center Service Business Operating License must be submitted at least 30 working days prior to the expiry date.
Advantages and Challenges
Advantages
- Favorable Geography and Land Availability: The Lao PDR offers abundant land resources at comparatively competitive costs, providing flexibility for large-scale data center development and future expansion.
- Reliable and Productive Power Supply: As the “Battery of Asia,” the Lao PDR benefits from substantial hydropower capacity, ensuring a stable electricity supply at competitive rates, i.e., an essential factor for energy-intensive operations such as data centers.
- No Foreign Ownership Restrictions: There are generally no foreign ownership restrictions applicable to data center operations. Foreign investors may hold up to 100% equity, subject to compliance with applicable laws and licensing requirements.
- Government Support: Eligible projects may benefit from incentives, subject to approval by the relevant authorities.
Challenges
- Limited High-Speed Connectivity Outside Major Urban Areas: High-speed broadband and fiber infrastructure remain largely concentrated in key cities, which may constrain site selection and redundancy planning in more remote locations.
- Public Infrastructure Constraints: In certain areas, supporting infrastructure such as road access, grid stability, and transmission capacity, may not yet meet the standards required for large-scale, mission-critical facilities.
- ICT Human Resource Gap: The development of ICT and digital-economy talent has not yet fully aligned with market demand, both in terms of technical expertise and workforce scale, potentially necessitating additional training or reliance on expatriate specialists.
Episode 3 – Lao PDR’s Data Center Expansion: What’s Happening Now
Data Center Services in Lao PDR Currently
Currently, the data center business across all four tiers (Tier I-IV) is open for license applications in the Lao PDR. The Department of Digital Technology, part of the Ministry of Technology and Communications, is responsible for receiving and reviewing these applications. To obtain a license, investors must demonstrate adequate registered capital, sufficient technical capacity, and compliance with the specified requirements and conditions.
At present, there are approximately 5 companies authorized to operate data center services in the Lao PDR, as follows:
- International Data Center Sole Co., Ltd.
- LA Data Center Sole Co., Ltd.
- Global Digital Management Solutions Sole Co., Ltd.
- Lao DC IT Sole Co., Ltd.
- Lao Telecommunication Public Co., Ltd.
Most of the above-mentioned companies have registered their business activities as providers of Platform as a Service (PaaS) and Software as a Service (SaaS). By contrast, only a limited number have registered as Infrastructure as a Service (IaaS) providers, primarily due to the more stringent technical requirements and the substantial capital investment required for such operations.
Other Data Storage Businesses
In addition to data center services, cloud service provider businesses are also permitted to operate in the Lao PDR.
Cloud Service Providers
Cloud service providers offer information storage rental services, data storage, data processing and management services, as well as cloud-based platforms, infrastructure, and applications to individuals, legal entities, and organizations.
Under Lao law, cloud service providers are classified into 2 categories:
- Type 1: Cloud service infrastructure utilizing facilities located within the Lao PDR; and
- Type 2: Cloud service infrastructure utilizing facilities located outside the Lao PDR.
Along with submitting a complete application dossier and all necessary supporting documents according to the relevant regulatory requirements, the main business conditions for establishing cloud services include the following:
- Technical Standards: The system must meet standards relating to efficiency, user-friendliness, and maintainability;
- Security Standards: The system must implement appropriate security measures, including firewall protection, Anti-DDoS mechanisms, access control, and identity verification processes, in order to safeguard users’ information.
At present, cloud service businesses in all categories are fully open for license applications in the Lao PDR. The Department of Digital Technology is authorized to receive and review applications for the issuance of the relevant licenses, subject to the investor demonstrating adequate registered capital, sufficient technical capacity, and compliance with all prescribed requirements and conditions.
The cloud service provider business license is valid for 1 year and may be renewed upon expiration.
Currently, there are 4 companies duly authorized to operate cloud service businesses in the Lao PDR, as follows:
- Ready To Connect (Laos) Co., Ltd.
- Global Digital Management Solutions Sole Co., Ltd.
- Warp Data Technology Lao Sole Co., Ltd.
- Lao Telecommunication Public Co., Ltd.
Epilogue
In addition to data center and cloud service provider businesses, Lao laws also permit certain other digital technology businesses, subject to compliance with applicable regulatory requirements and licensing conditions. Such businesses may include, for example:
- Blockchain
- Big Data
- Artificial Intelligence
- Digital Content
The specific licensing requirements, scope of permitted activities, and validity period of the license may vary depending on the nature and scale of the business.