From the Newest Member to a Digital Partner:
Timor-Leste and the ASEAN Digital Economy Framework Agreement

Connectivity Infrastructure: A Country on the Cusp

Understanding Timor-Leste's relationship with the ASEAN Digital Economy Framework Agreement requires, first, an honest assessment of where the country stands digitally. The picture is one of paradox: a young, predominantly mobile population increasingly eager to engage with digital life, confronting infrastructure and institutional systems that have struggled to keep pace with aspiration.

Until 2024, Timor-Leste was one of the last countries in the entire Asia-Pacific region without an active submarine fibre optic cable connection. International internet traffic for a country of 1.3 million people was routed entirely through satellite links and a handful of microwave radio connections to Indonesia — a situation that produced some of the slowest and most expensive internet in Southeast Asia. The median fixed broadband speed in 2024 was just 6.1 Mbps, ranking Timor-Leste among the 20 slowest nations globally, and the cost of one gigabyte of mobile data was US$1.92 — more than fifteen times the price in Cambodia and twenty times the price in Fiji.

That picture began to change with a pivotal infrastructure milestone. In May 2022, the Government of Timor-Leste signed a contract with Alcatel Submarine Networks (ASN) to install the Timor-Leste South Submarine Cable (TLSSC), connecting Dili to the North-West Cable System (NWCS) linking Darwin and Port Hedland in Australia. The Cable Landing Station (CLS) was constructed in Bebonuk, Dili, by RMS Engineering & Construction and DXN Limited — a project completed in June 2024. The cable itself, with a designed capacity of 27 Tbps, was landed in Dili in June 2024 and was expected to become commercially operational in mid-2025, with projected wholesale bandwidth cost reductions of up to 50 per cent. In April 2025, the government established a new state-owned enterprise tasked with managing the cable connection and setting wholesale prices for government agencies and telecommunications providers.

This single infrastructure project represents the most significant moment in Timor-Leste's digital history. Its benefits, however, will only materialise if accompanied by parallel investments in last-mile connectivity, local content hosting, digital literacy, and competitive wholesale pricing policies that prevent the gains from being captured by incumbents rather than shared with the broader population. The risk of a "cable without reach" — high-capacity international connectivity that does not translate into affordable access for rural municipalities — is real and must be explicitly managed.

Mobile Networks: Wide but Shallow

The telecommunications market is dominated by three major operators: state-affiliated Timor Telecom, Telemor (a joint venture with Viettel), and Telkomcel (an Indosat subsidiary). Together, these companies claim coverage reaching 95–98 per cent of the population for voice and 2G/3G data services. The picture for 4G is more constrained — limited primarily to Dili and the larger municipal centres — and 5G remains a future aspiration tied to the operationalisation of the submarine cable. In August 2024, the government granted new licences to three additional operators: Starlink (which launched service in December 2024), Gonsoa, and NerraVi Networks, ending the effective oligopoly of the big three and beginning a more competitive market era.

Geographic coverage tells a harsher story than population coverage. Significant portions of Timor-Leste's mountainous rural interior — including aldeia communities in municipalities such as Ermera, Aileu, Manufahi, and Oecusse — have limited or no telephone or data network access. The connectivity map of the country mirrors, with uncomfortable precision, the health access map: services concentrate in Dili and the coastal municipal centres, while the most vulnerable communities in the interior remain largely unconnected.

"A modern and inclusive telecommunications network is fundamental to building a strong economy, providing better public services, and creating jobs and opportunities for our people." — Prime Minister Xanana Gusmão, 2024

Government Networks: DNIC's Backbone

Within government, digital connectivity is managed by a dedicated institutional structure. DNIC — the Direção Nacional de Informação e Comunicação, housed within the Ministry of Transport and Communications — manages the terrestrial fibre optic networks connecting government agencies. Through a series of National Connectivity Projects (NCP 1 through NCP 7), DNIC has progressively extended a government intranet backbone connecting 440 institutions across national and sub-national levels to a central data centre in Dili. This is a genuine achievement for a young state still building its administrative infrastructure.

DNIC's mandate, however, is specifically government-to-government connectivity. It does not extend to public or commercial broadband provision, and its backbone serves ministries and public institutions rather than the population at large. The infrastructure it manages underpins critical digital government services — the Ministry of Finance's Freelance financial management system, the Civil Service Commission's SIGAP workforce database covering nearly 40,000 employees, and the Ministry of Education's "Escola ba Uma" distance learning programme launched during the COVID-19 period — but these services remain islands within a largely unconnected landscape.

The Institutional Architecture of Digital Governance

Timor-Leste's digital governance is distributed across a constellation of institutions with overlapping, sometimes competing, and often under-resourced mandates. Understanding this architecture — and its current limitations — is essential for assessing the country's readiness to implement DEFA and to benefit from regional digital integration.

The Problem of Governance Fragmentation

A candid assessment of Timor-Leste's digital governance reveals structural fragmentation that creates real risks for coherent policy development and DEFA implementation. The challenges are not primarily about institutional incompetence — Timor-Leste's digital agencies are staffed by capable, often highly motivated professionals working under genuine resource constraints. The problem is systemic: digital governance responsibilities are distributed across institutions with different ministerial supervisors, different operational mandates, different funding streams, and no formal coordination mechanism that spans the entire digital ecosystem.

The recently enacted Decree-Law 12/2024 on electronic transactions — aligned with UNCITRAL Model Laws and formally recognising electronic signatures and documents — is an important first step. It provides legal certainty for digital commercial interactions that simply did not exist before. But it is one instrument in what must become a comprehensive legislative framework covering data protection, cybersecurity, digital identity, and consumer protection in online markets — all of which are requirements for DEFA compliance.

Digital Payments: From Cash Dominance to Mobile Beginnings

Timor-Leste is, in the most literal sense, a cash economy. The US dollar is the official currency — a dollarised economy without a domestic currency — and cash transactions dominate commercial life at every level, from aldeia markets to government procurement. This is not simply a matter of preference or habit: it reflects a structural reality in which the banking and payments infrastructure has historically been concentrated in Dili and inaccessible to the majority of the population.

The numbers illustrate the scale of the challenge. According to UNCTAD's eTrade Readiness Assessment, only 64 per cent of adults have any account with a formal financial institution — and that figure is heavily skewed by Dili's 94 per cent bank account penetration, masking far lower access rates in rural municipalities. Over half the population must travel more than ten kilometres to access a physical bank branch. Only 14 per cent of Timorese engage in online shopping. In this context, building the payment infrastructure required for DEFA's electronic payments chapter is simultaneously an urgent development priority and a multi-year investment challenge.

Mobile Wallets: MOSAN, T-Pay, and the Digital Wallet Ecosystem

The two dominant mobile payment systems currently operating in Timor-Leste are MOSAN (operated by Telemor) and T-Pay (operated by Telkomcel). Both allow peer-to-peer money transfers between users on the same platform and some bill payment functions. UNCTAD data confirms that digital wallets, reaching 82 per cent of provinces geographically, are actually outpacing traditional banking in geographic access terms — a meaningful sign of the mobile-first digital economy's potential.

Banco Nacional Ultramarino (BNU) launched Timor-Leste's first mobile wallet product — BNU Mobile — in partnership with Timor Telecom, with UN INFUSE Programme support, allowing customers with or without bank accounts to make payments, transfer money, withdraw cash, and make purchases up to US$1,000. BNCTL, the state-owned commercial bank, has more recently undergone a significant technology upgrade using Temenos' Inclusive Banking Suite, expanding mobile banking and agent banking services, particularly for remote and rural communities. European Union and UNCDF support has further helped credit unions adopt digital payment platforms to serve their members in areas outside Dili.

The critical weakness in the current mobile payment landscape is interoperability. MOSAN and T-Pay are siloed systems — users can only transfer money within the same platform, not across operators. There is no national payments switch analogous to what Singapore's PayNow or Thailand's PromptPay achieved within their own markets before linking regionally. This intra-national fragmentation must be resolved before Timor-Leste can even contemplate the cross-border payments interoperability that DEFA's Chapter 5 requires. The BCTL's participation in the Pacific Regional Regulatory Sandbox — alongside central banks from Fiji, PNG, Samoa, and others — is a promising starting point for building the regulatory frameworks that can eventually underpin interoperable payment systems.

Remittances: The Digital Finance Lifeline

One area where digital financial services have gained meaningful traction is remittances. Timor-Leste has a significant diaspora, particularly in Australia, Portugal, and other parts of Southeast Asia, and remittance flows are economically important. BNCTL has specifically targeted the diaspora market, offering digital remittance services and pursuing international expansion. Digital remittances are one area where the cost-benefit case for digital financial services is immediately legible to households: lower transfer fees, faster settlement, and greater accessibility than traditional cash-transfer services.

E-Commerce: Nascent, Urban-Concentrated, and Cash-On-Delivery Dependent

Timor-Leste's e-commerce market is real but small. Statista projects a total digital commerce market value of approximately US$260 million in 2024, with a compound annual growth rate of around 4.5 per cent through 2028. The UNCTAD assessment more soberly notes that only 14 per cent of the population shops online, and that cash-on-delivery remains the dominant "digital commerce" fulfilment method — a hybrid that captures some of the ordering convenience of online platforms without the payment infrastructure transformation that true digital commerce requires.

The barriers to e-commerce growth are well-understood: limited internet access and high data costs; low digital literacy; absent or nascent digital payment infrastructure; underdeveloped logistics and last-mile delivery networks; language barriers (limited Tetum-language online content and low English proficiency); and low consumer trust in online transactions. The UNCTAD assessment identifies trust — not ease of use or peer influence — as the single most important factor shaping digital service adoption in Timor-Leste's low-infrastructure context, a finding echoed in academic research on e-wallet adoption. Building trust in digital systems requires transparent, secure platforms, reliable dispute resolution, and consistent enforcement of consumer protection rules — all areas where Timor-Leste's legal frameworks remain underdeveloped.

The government's forthcoming National E-Commerce Strategy, being developed with UNCTAD support, and the Timor Digital 2032 plan together signal genuine political commitment to using e-commerce as a development lever. The €12 million EU-Timor-Leste PADIT-TL agreement signed in May 2025, allocating €3 million specifically to e-government services and digital literacy, and the ADB's e-Government Development and Infrastructure Project, focused on a national data centre and disaster recovery facilities, provide some of the external financing that domestic budgets cannot yet supply.

What DEFA Requires: Nine Elements, Ten Chapters

The ASEAN Digital Economy Framework Agreement, expected to be signed at the 49th ASEAN Summit in November 2026, is projected to be the world's first legally binding region-wide digital economy agreement. Negotiations, which formally began in December 2023, have made substantial progress: as of early 2026, approximately 116 of 130 substantive paragraphs have been cleaned, and 28 articles finalised. The agreement is structured around nine core elements and ten substantive chapters covering the full spectrum of digital economy governance.

DEFA also contains significant new articles beyond the nine core elements that were part of the original negotiations: Unsolicited Commercial Electronic Messages (spam regulation); Anti-Online Scams cooperation; Digital Equity and Inclusion; Open Government Data; Data-Driven Innovation; FinTech Cooperation; ICT Products Using Cryptography; Submarine Cable System Cooperation; and MSME Support provisions. Many of these new articles address areas of direct relevance to Timor-Leste's developmental situation — particularly digital equity and inclusion, MSME support, and submarine cable cooperation.

Gap Analysis: Where Timor-Leste Stands

An honest mapping of DEFA's requirements against Timor-Leste's current legislative, institutional, and technical state reveals significant gaps that must be addressed before meaningful compliance and participation becomes possible. The following table presents this assessment element by element.

The March 2026 Dili Information Session: Significance and Outcomes

Against this backdrop of gaps, a three-day information session held in Dili from 2 to 4 March 2026 took on considerable significance. Organised by the Ministry of Commerce and Industry in collaboration with the Ministry of Foreign Affairs and the ASEAN Secretariat's Digital Economy Division, the session brought together senior officials from across the government — Finance, Justice, Interior, Education, Agriculture, the Presidency of the Council of Ministers, and other relevant agencies — for a comprehensive briefing on the DEFA's current text, its core obligations, and the sequencing of commitments Timor-Leste would need to accept as a signatory.

"Your participation is critical in determining Timor-Leste's readiness to negotiate and sign ASEAN's Digital Economy Agreement (DEFA) scheduled for November 2026. All participants' inputs will be crucial." — Augusto Júnior Trindade, Vice Minister of Commerce and Industry (SEOM Lead), Invitation Letter, February 2026

The workshop covered all ten chapters of the DEFA text systematically, walking officials through the obligations and the national legislative implications of each. Day One addressed digital trade, cross-border e-commerce, digital ID and authentication, electronic payments, and talent mobility. Day Two provided a dedicated session for Timor-Leste's DEFA Negotiating Committee. Day Three addressed data protection and privacy, online safety and cybersecurity, competition policy, the new additional articles, the development chapter, and dispute settlement mechanisms.

The session served multiple strategic purposes simultaneously: it raised awareness of DEFA's content among ministries that may not have followed regional negotiations closely; it began the process of identifying domestic legislative and institutional gaps; it created a cross-ministerial network of officials with shared DEFA literacy; and it prepared the DEFA Negotiating Committee for the substantive negotiation rounds that will precede the November 2026 signing deadline. The workshop also emphasised the sequencing priority — that Timor-Leste must align with the foundational baseline agreements, particularly the E-ASEAN Framework Agreement and the ASEAN Agreement on Electronic Commerce, as a precondition for meaningful DEFA participation.

What DEFA Can Mean for Timor-Leste

The concept of leapfrogging — bypassing intermediate stages of development to reach an advanced state more directly — has a well-established track record in telecommunications. East Africa's mobile money revolution demonstrated that a region without extensive fixed banking infrastructure could build world-leading mobile payment systems by going mobile-first. Bangladesh built a remarkable garments export industry partly through preferential trade frameworks before its infrastructure was mature. Timor-Leste's circumstance — a very young nation with a young population, entering a major regional digital agreement — presents an analogous opportunity if the policy conditions are right.

The BCG study commissioned to inform DEFA negotiations estimated that a forward-looking "North Star" DEFA could double the value of Southeast Asia's digital economy to approximately US$2 trillion by 2030, with value multipliers for lower-middle income ASEAN countries potentially reaching 6.5 times current digital economy values. Timor-Leste sits firmly in the lower-middle income category. The arithmetic of potential gain is compelling — provided that the country's legal and institutional frameworks are ready to channel that potential into real economic activity for real Timorese households.

Digital Health as a Concrete DEFA Dividend

From the perspective of health policy — the primary focus of this essay series — DEFA's potential contributions are direct and urgent. The telemedicine infrastructure described in Essay V of this series depends on affordable, reliable broadband. The national pharmacy portal, the laboratory booking systems, and the patient portal proposed as policy innovations all require the connectivity that the submarine cable promises to deliver. DEFA's data protection chapter, once implemented, would provide the legal framework needed to protect patient data as it moves through digital health systems. DEFA's digital ID provisions, if implemented nationally, would resolve the patient identification problem that undermines continuity of care across Timor-Leste's fragmented health system. For a country where a woman in Vatuvou, Maubara, must choose between seeking healthcare and losing a day's income to travel, a functioning digital health system — underpinned by DEFA-compatible infrastructure and legal frameworks — could be the difference between a wasted journey and a life-saving consultation.

MSMEs and Digital Trade: Reaching the Rural Economy

Timor-Leste's private sector is overwhelmingly composed of micro and small enterprises, most of them operating informally in local markets. DEFA's MSME provisions and cross-border e-commerce chapter create the potential — not guaranteed, but real — for Timorese producers of coffee (the country's most important non-petroleum export), handicrafts, and agricultural goods to access regional markets digitally. This requires payment systems that rural producers can actually use, digital literacy that extends beyond Dili, and logistics infrastructure that connects rural producers to urban and export distribution points. None of this happens automatically from signing DEFA — but without DEFA, the regional market access framework does not exist at all.

Talent Development and Brain Network Effects

Timor-Leste's "brain drain" challenge — well-documented in the health workforce context — has a digital economy analogue. Young Timorese with digital skills often seek opportunities abroad where those skills command higher wages. DEFA's talent mobility and cooperation chapter offers the possibility of a "brain network" rather than a "brain drain": facilitating short-term mobility, knowledge transfers, and regional collaboration arrangements that keep Timorese digital talent connected to the country's development even when working elsewhere. This requires, as a precondition, that Timor-Leste develops a domestic digital skills ecosystem — formal training, industry partnerships, and educational programmes in ICT — that gives that talent something to connect back to.

Policy Recommendations: What Timor-Leste Must Do

The gap analysis and opportunity assessment above point to a coherent set of priority actions. These recommendations are organised along three time horizons: immediate (before DEFA signing, November 2026); short-term (2026–2028); and medium-term (2028–2032, aligned with the Timor Digital 2032 framework).

1. Enact a Personal Data Protection Law (immediate — 2026) This is the single most time-critical legislative gap. Without a data protection framework, Timor-Leste cannot comply with DEFA's Chapter 8 commitments, cannot attract investment in digital services that require data governance assurance, and leaves its citizens without legal protection for their personal information. The law should establish a Data Protection Authority, adopt the ASEAN Data Management Framework principles, and provide a legal basis for cross-border data transfers subject to appropriate safeguards.
2. Develop a National Cybersecurity Strategy and Establish a CERT (immediate — 2026) Timor-Leste must establish institutional cybersecurity capacity — including a Computer Emergency Response Team — before it can comply with DEFA's Chapter 9 obligations or participate meaningfully in the ASEAN cybersecurity cooperation architecture. ANC should be designated as the national competent authority for cybersecurity, with dedicated capacity and resources.
3. Create a National Digital Economy Coordination Body (immediate — 2026) The institutional fragmentation documented in this essay must be addressed through a formal coordination mechanism. A National Digital Economy Council or equivalent — chaired at ministerial level, convening ANC, DNIC, TIC Timor, BCTL, MCI, and relevant line ministries — would provide coherent strategic direction and a single point of coordination for DEFA implementation. This body should also serve as the home for Timor-Leste's DEFA Negotiating Committee work.
4. Build a National Payments Switch for Domestic Interoperability (short-term — 2027) The fragmentation between MOSAN and T-Pay is not merely inconvenient — it is a structural barrier to the interoperable digital payment ecosystem that DEFA requires. The BCTL should mandate technical interoperability standards for mobile payment operators and facilitate the development of a national payments switch (modelled on QR code standardisation successes in Indonesia, Thailand, and Singapore). This must precede any realistic aspiration to cross-border payment interoperability under DEFA's Chapter 5.
5. Develop a National Digital Identity Framework (short-term — 2027) Digital identity is simultaneously a DEFA requirement, a prerequisite for digital health systems, and a foundation for accessible digital financial services. A national digital ID programme — building on Timor-Leste's civil registration infrastructure, prioritising interoperability with ASEAN frameworks — would unlock multiple development benefits beyond DEFA compliance alone. ADB's e-Government project provides a financing avenue; ASEAN partners with more advanced systems (Thailand, Singapore, Vietnam) offer technical cooperation possibilities.
6. Accelerate Connection to the ASEAN Single Window (short-term — 2027–2028) Trade facilitation through paperless trade and a National Single Window is a core DEFA commitment and one of the most direct economic benefits of regional digital integration for a trade-dependent country. The Customs Authority should be provided with the technical assistance and financing needed to develop a National Single Window, with a clear timeline for connection to the ASW operational framework.
7. Leverage the Submarine Cable to Drive Down Data Costs and Expand Rural Connectivity (medium-term — 2025–2028) The TLSSC cable's potential will only be realised if the wholesale pricing framework prevents incumbents from capturing all bandwidth gains as profit. The new SOE managing the cable must operate with a public interest mandate, setting wholesale prices that enable downstream operators — including new entrants Starlink, Gonsoa, and NerraVi — to offer affordable retail services. Rural connectivity expansion must be built into the cable governance framework, not treated as a market afterthought.
8. Develop a National Digital Skills Strategy Aligned with DEFA's Talent Chapter (medium-term — 2027–2030) The digital economy cannot be built without digital workers. Timor-Leste's university sector, particularly UNTL, should develop ICT and digital economy curricula in partnership with regional institutions. The DEFA talent chapter's mobility provisions should be operationalised through bilateral agreements with more digitally advanced ASEAN partners — Vietnam, which has already committed to ICT scholarships, and Singapore, which has the region's most developed digital skills frameworks — to build a cohort of Timorese digital professionals who can lead domestic implementation.

Conclusion: A Window That Will Not Stay Open Indefinitely

Timor-Leste's admission to ASEAN in October 2025 was described in many commentaries as the culmination of a long journey. In digital economy terms, it is more accurately the beginning of a far more demanding one. The ASEAN Digital Economy Framework Agreement — ambitious, legally binding, and targeted for signing in November 2026 — represents both an extraordinary opportunity and a significant governance challenge for the world's youngest nation.

The country possesses genuine assets. Its young, increasingly connected population has demonstrated appetite for digital services. The TLSSC submarine cable, now operational, transforms the fundamental infrastructure constraint that made digital ambition impractical for two decades. Institutions like DNIC, TIC Timor, and BCTL have built operational capacity that, though modest, is real. The March 2026 Dili information session signalled political commitment at the vice-ministerial level, and the cross-ministerial participation it convened is a foundation for the coordination that sustained DEFA implementation will require.

The gaps, however, are substantial. The legislative architecture for a digital economy — data protection, cybersecurity, digital identity, e-commerce consumer protection — does not yet exist. Governance is fragmented across institutions that do not have a formal coordination mechanism. Digital payments are growing but remain siloed and non-interoperable. E-commerce is nascent and rural populations are largely excluded. Leapfrogging is possible — but it requires deliberate investment in the enabling conditions that make the leap safe and inclusive, rather than a transfer of digital economy gains from one concentrated urban elite to another.