Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has issued the Notification of the NBTC Re: Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications to replace the previous 2006 notification of the same name. The replacement notification supports compliance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA), modernizes the regulations in response to technological change and the convergence of digital business, and enhances the protection of telecommunications users’ personal data, privacy rights, and freedoms. Key aspects of the replacement notification are highlighted below. User Data and Consent The notification specifies that “user’s personal data” includes name, address, ID number, mobile number, usage information, and user behavior that can identify the user. “User” does not include resellers of telecommunications services. To collect, use, or disclose users’ personal data for a purpose other than telecommunications service, service providers must obtain each user’s consent prior to or at the time of collecting the data. The consent (whether written or electronic) must be separate from the telecommunications service agreement. Service providers must clarify the purpose of collecting data, and they must honor users’ rights to opt in and opt out by providing clear and convenient channels for users to withdraw any of their information or cancel any services offered by the operator. Service providers must add an electronic channel for receiving requests from users to review, access, edit, change, or obtain a copy of their data. The electronic channel must also allow requests from users to suspend use or disclosure of their personal data and withdraw consent to collect, use, or disclose their personal data. In addition, service providers must have a system for verifying the identity of users who want to exercise the rights listed in this paragraph. Data Collection and Storage Collection

Protecting the aesthetic features of consumer items, such as household appliances, is essential for businesses looking to gain a competitive edge, particularly in the dynamic markets of Vietnam, Indonesia, and Thailand. Industrial design registrations (or design patents in Thailand) provide an effective means to protect the unique and ornamental designs of products, ensuring that their distinctive appearance is not imitated by competitors. This article provides a general overview of design systems in Vietnam, Indonesia, and Thailand, as well as some key considerations for businesses and rights holders. All three of these countries use an examination system for assessing applications to protect designs. While all three jurisdictions are members of the Paris Convention, only Vietnam has fully completed the process of becoming a member of the Hague Agreement. The table below offers a general comparison of the three countries’ design systems, with additional details provided in the subsequent sections. Vietnam Owners of a household appliance design may seek design rights in Vietnam by filing a national design application at the Vietnam IP Office or by filing an international design application designating Vietnam either directly with the World Intellectual Property Organization (WIPO) or indirectly through the office of the applicant’s contracting party under the Hague Agreement. Vietnam’s 2022 IP Law redefines “industrial design” as the external appearance of a product or part thereof to be assembled into a complex product, represented by shapes, lines, colors, or a combination thereof, and visible in the process of exploiting the utility of the product or complex product. The two options for obtaining design rights in Vietnam are detailed below. Vietnam National Design Application As Vietnam is a signatory to the Paris Convention, applicants are entitled to a six-month convention priority period from the filing date of the corresponding application in another jurisdiction. Under Vietnam’s

Cambodia has issued a set of regulations that aim to encourage greater energy efficiency from appliances marketed in the country. The regulations follow Cambodia’s adoption of its National Energy Efficiency Policy, which sets out the government’s energy efficiency targets and policies to reach them by 2030, including the ambitious national target of reducing the country’s total energy consumption by at least 19%. This set of regulations for appliances marketed in Cambodia is contained in Sub-Decree No. 254 on the Management and Improvement of Energy Efficiency of Electrical Appliances, dated August 11, 2023. This sub-decree sets out product registration and energy efficiency labeling requirements for electrical appliances marketed in Cambodia. It further provides that appliances should meet energy efficiency standards and all other mandatory standards that apply to electrical appliances. During the product registration process, the appliances are checked against such standards, and registration is only granted if the standards are met. The sub-decree identifies the Ministry of Mines and Energy as the main ministry responsible for the implementation of the sub-decree. To assist with the wide scope of regulations as set by the sub-decree, it further appoints assisting ministries that may implement and enforce only certain aspects. These effective implementation and enforcement mechanisms suggest that once the sub-decree’s 12-month implementation period has passed, there is likely to be a rather strict enforcement approach to the requirements. Key Features of the Sub-Decree Several mandatory standards have already been applied to most electrical appliances over the past years, but the required product registration process to check for compliance with those standards has not always been completed by those importing, distributing, or manufacturing electrical appliances in Cambodia. The new sub-decree clearly mandates a product registration requirement as a check to verify the applicable standards are met, and sets penalties for non-compliance. Penalties

On September 14, 2023, Thailand’s Personal Data Protection Committee (PDPC) published a notification on the requirements for the appointment of a data protection officer (DPO) in the Government Gazette, taking effect on December 13, 2023. The notification on appointing a DPO lays out the criteria for what constitutes processing of personal data requiring “regular monitoring of the personal data or the system” by reason of “having large-scale personal data,” which requires data controllers and data processors to appoint a DPO under the Personal Data Protection Act B.E. 2562 (PDPA). Criteria After a hearing on the draft DPO appointment notification in July, the published version has been slightly amended while the main criteria for appointment of a DPO are still the same. These have been finalized as follows: When determining whether processing of personal data requires regular monitoring due to having large-scale personal data, only the “core activity” of the data controller or data processor is to be taken into consideration. The term “core activity” denotes an essential and integral activity directly related to the primary operations of the data controller or data processor and does not include any supplementary business activities (e.g., human resources and information technology activities). “Processing activities that require regular monitoring of personal data” refers to activities relating to tracking, monitoring, analyzing, or predicting the behavior, attitude, or profile of individuals, and generally involves the processing of personal data in a systemic manner on a usual or regular basis. Examples include membership card programs, credit scoring, insurance premium consideration, fraud prevention, processing of personal data by computer network system service providers or telecommunications operators, behavioral advertising, and so on. To determine whether processing activities constitute “large-scale processing of personal data,” various factors are considered: Volume, type, or nature of personal data processed; Duration or permanence of