In December 2023, Thailand’s Office of Insurance Commission (OIC) presented draft amendments to the country’s laws for life and non-life insurance, pointing to significant modifications ahead for the laws governing insurers. These amendments primarily aim to: Elevate governance standards within the insurance industry. Support compliance with the Financial Sector Assessment Program (FSAP) of the International Monetary Fund and the World Bank. Address current regulatory enforcement issues. Harmonize governance standards for insurance businesses with those for financial institutions. The draft amendments involve changes to a wide range of regulatory areas; key changes include the following: Corporate Governance Expanding the definition of directors to include representatives of foreign insurers’ branches in Thailand. Imposing the same standards of care and obligations on “persons having the authority to manage the company” as on directors. Requiring OIC approval for appointment and reelection of directors. Expanding the list of prohibited connected transactions to include lease of property. Shareholding Requirements Requiring mandatory reporting to the OIC for individuals holding 5% or more of shares in an insurance company. Requiring regulatory approval for 10% shareholding and prohibiting exceeding the limit without OIC approval or compliance with subregulations. Dividend Payments Empowering the OIC to issue subregulations on dividend payments from both life and non-life insurance companies. Products and Distribution Permitting directors, staff, and employees to sell insurance products after obtaining relevant training from the OIC. Granting insurers discretion to set group insurance premium rates following regulations, methods, and conditions set out by the OIC without having to obtain OIC approval. Allowing insurers to underwrite foreign currency-based insurance. Allowing insurers to offer additional benefits beyond policy stipulations in compliance with the relevant OIC subregulations. Capital Fund and Finance Establishing minimum capital fund requirements of approximately THB 1 billion for non-life and THB 5 billion for life insurers. Imposing sanctions

On December 15, 2023, the Electricity Authority of Cambodia (EAC) issued a notification requiring all owners of solar power systems to report their systems to their local electricity supplier by January 31, 2024. Systems that have already been reported under existing regulations are exempt from this requirement. Systems that remain unreported after the deadline will be deemed illegal and subject to penalties, including possible disconnection from the national grid. The rationale for the reporting requirement is that the EAC expects to adopt a new solar power regulation soon. Electricite du Cambodge (the main state-owned utility provider in Cambodia) and EAC-licensed private electricity providers are now gathering data on the current use of solar power systems in order to prepare for, adopt, and execute the upcoming regulation. The reporting requirement is to facilitate this gathering of data. The upcoming regulation, planned for early 2024 according to the notification, follows last year’s Prakas No. 159, which contained the Ministry of Mines and Energy’s guidelines and principles for rooftop solar systems. The EAC now needs to issue implementing regulations that are in line with the ministry’s guidelines and principles. Although stand-alone solar power systems that did not have a connection to the national grid were previously not regulated and did not require any authorizations, the EAC is now stating that all types of solar power systems need to adhere to the reporting requirement under the notification. According to the EAC, the upcoming regulation will address all types of systems, and the December 15 notification clearly announces that all types of solar power systems will need to obtain EAC approval under the upcoming regulation. Solar power system operators in Cambodia should report their systems to their local electricity providers by January 31, 2024, to avoid any penalties, while remaining vigilant for the upcoming

As of January 1, 2024, all films distributed in cyberspace in Vietnam must display ratings and warnings (if required) for viewers, following the phased-in effectiveness of Decree No. 131/2022/ND-CP of the Government dated December 31, 2022, guiding the implementation of the Law on Cinematography (Decree 131). While Decree 131 took effect on January 1, 2023 (the same date as the Law on Cinematography), it provided a grace period of one year for films to be distributed in cyberspace without the display of ratings or warnings. Now, for continued distribution in cyberspace of such films, distributors must add ratings and warnings in compliance with regulations issued under Circular No. 05/2023/TT-BVHTTDL of the Ministry of Culture, Sports and Tourism (MOCST) dated April 5, 2023 (Circular 05). Film Rating Film distributors can either carry out the film rating by themselves or request the MOCST to provide the rating. In the former case, the distributor must request the MOCST to recognize its eligibility for self-rating. (Based on our experience successfully obtaining this recognition for a client, this procedure may take about two to three months for completion, depending on the availability of required information and materials.) If a distributor cannot obtain recognition for film self-rating eligibility, it must request the MOCST to provide the film rating for each and every film it distributes in cyberspace. Display of Ratings and Warnings Circular 05 requires that the film rating must be displayed clearly and prominently in the introduction of a film in order for a user to make an informed decision to access that film or not. Moreover, the rating must be displayed on the left or right corner of the screen during the entire distribution time. Warning contents must be in words or sound which must be displayed three seconds after the beginning of

On December 25, 2023, Thailand’s Personal Data Protection Committee (PDPC) issued two notifications under sections 28 and 29 of the Personal Data Protection Act 2019 (PDPA) that address essential aspects and criteria for the cross-border transfer of personal data. These notifications are scheduled to come into effect on March 24, 2024. Key points in the notifications are outlined below. Adequate Data Protection Standards (Section 28) Unless otherwise provided by the PDPA, the destination country or international organization that receives the transferred personal data must have “adequate data protection standards,” as determined by the following factors: Legal measures and mechanisms. The destination country or international organization must have legal measures or mechanisms aligned with the personal data protection laws in Thailand. Specifically, the obligations of data controllers need to include providing appropriate security measures, implementing personal data protection measures that are suitable and that enable the exercise of data subjects’ rights, and establishing effective legal remedial measures. Regulatory authority. The presence of an agency or organization entrusted with the duties and authority to enforce laws and regulations related to personal data protection is also a critical factor. In addition, this notification empowers the Office of the PDPC to refer cases, either independently identified or proposed by a data controller, to the PDPC for adjudication. The PDPC retains the discretion to make decisions on a case-by-case basis or to establish a list of destination countries or international organizations that it considers to have adequate data protection standards. Binding Corporate Rules and Appropriate Safeguards (Section 29): In the realm of global data exchange, two prominent mechanisms have emerged as key enablers of secure and compliant transfer of personal data: Binding corporate rules (BCRs). Implementation of BCRs involves enforcing an approved policy for safeguarding personal data transferred among affiliated businesses or within the