On July 13, 2023, Thailand’s Personal Data Protection Committee (PDPC) published a draft notification on the requirements for appointment of a data protection officer (DPO). Under the Personal Data Protection Act B.E. 2562 (PDPA), data controllers or data processors must appoint a DPO if: The data controller or data processor is a state agency as prescribed by the PDPC (the list of state agencies was published in the Government Gazette on July 18, 2023); The activities of the data controller or data processor in relation to the processing of the personal data require “regular monitoring of the personal data or the system,” by reason of “having large-scale personal data” as prescribed by the PDPC; or The core activity of the data controller or data processor is related to the processing of special categories of personal data (e.g., health-related data, biometric data, etc.). The draft notification’s criteria for determining whether a processing activity (1) requires regular monitoring of the personal data or the system, and (2) involves large-scale personal data are outlined below. General Principles When determining whether processing of personal data requires regular monitoring due to having large-scale personal data, it is likely that only the “core activity” of the data controller or data processor is to be taken into consideration. The term “core activity” denotes an essential and integral activity directly related to the primary operations of the data controller or data processor and does not include any supplementary business activities. Regular Monitoring of Personal Data or Systems According to the draft notification, activities related to processing personal data require regular monitoring of the personal data or the system if: The core part of the data controller’s or data processor’s activities consists of tracking, monitoring, analyzing, or predicting the behavior, attitude, or profile of individuals; and These activities generally involve the processing of personal data in a systemic manner

Vietnam’s Decree No. 72/2013/ND-CP, as amended by Decree 27/2018/ND-CP (referred to collectively as “Decree 72”) regulates internet services and online information, and plays a crucial role in governing significant services such as social networks, online games, and aggregated information websites, as well as key matters like domain names and online information security. Given the rapid pace of development in these areas, Decree 72—having been in effect for nearly a decade—is in need of an update. The Ministry of Information and Communications (MIC) had initially intended to draft an amendment to Decree 72 in 2021. However, the magnitude of required changes made it impractical to retain the form of an amending decree, leading the MIC to shift its focus toward replacing Decree 72 entirely. As a result, a new draft decree to replace Decree 72 (the “Draft Decree”) was released by the MIC for public consultation from July 17 to September 15, 2023. The Draft Decree is comprehensive, with six chapters, 87 articles, and an appendix of 56 forms. The following are some of the main issues covered by the new Draft Decree. 1. Social Network Services Classification and licensing/notification Social network services include onshore and offshore social network services. Onshore social network services refer to those provided by organizations or enterprises with legal status in Vietnam, and are divided into “high-visitor” or “low-visitor” categories based on number of regular visitors. The high-visitor category includes social networks with total visits of 10,000 or more per month for six consecutive months or with more than 1,000 regular members in a month. High-visitor onshore social network service providers must obtain a license to provide social network services. Low-visitor onshore social network service providers only need to notify the MIC’s Authority of Broadcasting and Electronic Information (ABEI) and receive the ABEI’s written notification confirmation before providing social network services. Offshore

Myanmar’s Ministry of Commerce (MOC) issued three notifications related to e-commerce on July 21, 2023, classifying online retail businesses as essential services, requiring them to register with the relevant authorities, and setting the criteria for their registration. Under Notification No. 49/2023 the MOC authorized the Department of Trade (DOT) to issue notifications, orders, and directives relating to online retail businesses. This was followed by Notification No. 50/2023, which classifies online retail businesses as essential services under the Essential Supplies and Services Law and requires them to register with the DOT within six months of the issuance of the notification (i.e., by January 21, 2024). Failure to register within the specified period will be punishable by imprisonment for six months to three years and a fine of up to MMK 500,000 (approx. USD 238). Finally, under Notification No. 51/2023, the MOC set out the criteria and requirements for the registration of online retail businesses by entities, business institutions, and individuals, as well as the duties and liabilities of sellers and consumers. Pursuant to this notification, registration should be completed via the DOT’s online system, fees must be paid digitally, and electronic registration certificates will be issued. Certificates are initially valid for two years, and can be renewed. The MOC will provide information at a later time on the prescribed forms, certificate format, registration and online fees, and online registration portal. In applying for registration, an entity or business institution established under the Myanmar Companies Law, Special Company Act, Co-operative Society Law, or any other existing Myanmar laws must have a website with its own domain name or an online channel with an exact address that is used for online sales and a registered business address within Myanmar. Individual applicants must be at least 18 years old, reside in Myanmar, and provide a business operating address

Thailand’s Electronic Transactions Development Agency (ETDA) held a briefing session on July 20, 2023, laying out the changes and new requirements in draft sublaws under the Royal Decree on Digital Platform Services. These sublaws are expected to be announced in August 2023. The key changes and new requirements are listed below. The ETDA has drafted guidelines on the methods for identifying active users to give digital platform service operators a better understanding of the calculation methods. The definition of “users” for calculating annual monthly active users (AMAUs) has been reduced in scope to cover only users in Thailand. E-marketplace digital platform services that will suspend or terminate operations for specific users must inform the affected users and provide a period for them to challenge the suspension or termination. Digital platform service operators cannot use the requirements to identify their active users as a legal basis for processing users’ personal data, especially for profiling and tracking activities. The sublaws on announcement of terms and conditions (T&Cs) and changes to T&Cs, once issued, will take effect on January 3, 2024, while the other sublaws will take effect immediately (i.e., August 21, 2023). This shows that the ETDA has acknowledged the private sector’s feedback that the requirements on T&Cs will take more time for operators to comply with. The requirements for changing T&Cs have been adjusted. Under the current draft, the required advance notification period can be exempted if a change in the T&Cs is for the purpose of, for example, rolling out new products or services and improving the platform. Required submissions under the Royal Decree for Digital Platform Services and its sublaws will be made through the ETDA’s online portal. There will likely be no extensions granted for compliance with the Royal Decree for Digital Platform Services and its sublaws (other than those that relate to T&Cs as mentioned

Thailand’s Energy Regulatory Commission (ERC) is in the process of reviewing a draft regulation that updates the nationality qualifications for the ultimate shareholders and directors of applicants for an energy business license. The draft ERC Regulation Re: Qualifications, Documents and Application for Electricity Business—which is intended to replace the ERC Regulation Re: Application and Permission for Electricity Business B.E. 2551 and its amendments—is likely to be adopted soon and will affect licensed companies that are foreign majority owned when they apply for or renew their energy business licenses. The draft regulation requires partnerships, limited companies, and public limited companies to have the following qualifications unless there is an international agreement granting national treatment for a specific commitment (mode 3 or mode 4) or exemption by other laws: Juristic persons must be established under Thai law or registered in Thailand with the objective of carrying out electricity business; For private limited companies, foreign ultimate shareholders must not hold more than 49% of the total shares, and the number of the foreign shareholders must not exceed half of all shareholders; At least half of all directors must have Thai nationality; and Any authorized directors must have Thai nationality. When the draft regulation is adopted, it will not take retroactive effect on previously granted energy business licenses, which will continue to be valid until they expire if there is no material change to the license as defined by the draft regulation. Once the license is up for renewal (energy business licenses are normally issued for a specific period of time), it will be subject to the draft regulation. All license applications submitted prior to the effective date of the draft regulation and under consideration will be deemed applications for a license under the draft regulation. As noted above, the new qualification requirements will affect licensed companies owned or controlled by

Patent prosecution can be a lengthy process, especially in jurisdictions where patent office backlogs impede the timely examination and grant of patents. Acknowledging the imperative for expeditious patent prosecution, numerous patent holders in Southeast Asian (SEA) nations have expressed their eagerness to expedite the process. Consequently, governments in Cambodia, Indonesia, Laos, Thailand, and Vietnam have instituted diverse programs to facilitate swifter patent examination and grant. These programs are implemented either within their own intellectual property systems or through collaboration with other intellectual property offices. Notably, many accelerated examination programs are also available for inventions pertaining to green technologies or matters of public interest. In this article, we will explore a selection of these options, shedding light on the programs that facilitate faster patent examination and grant. While the following sections highlight specific initiatives, it is important to note that there may be other programs and opportunities beyond those mentioned here.   ASEAN Patent Examination Cooperation (ASPEC) Program One of the most notable programs in the region, the ASPEC program offers a mechanism for patent applicants to accelerate the examination of their patent applications in a participating IP office of an ASEAN member state (the second IP office) by leveraging the search and examination reports issued by the participating IP office of another ASEAN member state (the first IP office) on the corresponding application. Patent applications filed in any of the participating ASEAN member states, including Brunei Darussalam, Cambodia, Indonesia, Lao PDR, Malaysia, the Philippines, Singapore, Thailand, and Vietnam, are eligible to benefit from the ASPEC program. An ASPEC request can be filed at any time before the final decision of grant or refusal; however, to maximize the effectiveness of the program, it is advisable to file the ASPEC request concurrently with the substantive examination request—by doing so, the substantive examination process can be initiated

On July 14, 2023, Myanmar’s Ministry of Planning and Finance issued Notification No. 50/2023, which sets out the rules, requirements, and procedures for registered trademark owners to protect their intellectual property rights through customs recordation in accordance with the relevant section of the Trademark Law 2019. The notification is accompanied by eight forms to be used in trademark-related customs matters (three for use by applicants and five for use by the Customs Department). Customs Recordation Owners of trademarks registered under the Trademark Law 2019 can apply (directly or via a legal representative) for customs recordation to protect against cross-border trade in counterfeit goods bearing their registered marks. Applications using the specified form should attach the required documentary evidence, including any separately specified by the Customs Department. If the application for recordation is accepted, the Customs Department will provide the applicant with a registration number within 15 days of receiving the application. Recordations are valid for two years from the acceptance date of the application and can be renewed every two years, 30 days before the expiration date. According to the notification, owners of marks recorded by the Customs Department must notify the department within three working days upon amendment or withdrawal of any information related to the mark at the Intellectual Property Department (IPD), and submit any necessary documentation. Suspension Order Regardless of whether a customs recordation has been filed, owners of trademarks registered under the Trademark Law 2019 can request a suspension order to prevent the release of goods into free circulation by laying out sufficient grounds for believing that counterfeit goods are being or will be imported into the country. Applications can be in English or Myanmar language, and a translation may be required upon the Customs Department’s request. Applications can be submitted in person, by post, or electronically. The Customs Department will notify

Cambodia’s new Law on Rules of Origin, which was published on July 5, 2023, is an important legal development that will help the country become a more important trading, manufacturing, and processing hub in the ASEAN region. This legal development accords with the government’s aims to increase consumer protection and clarity on product origin, encourage cross-border trade, position Cambodia as a source for quality manufacturing and processing, and push the “Made in Cambodia” quality label. These new, much clearer rules of origin also bring Cambodia’s legal framework in line with trading obligations set by ASEAN and the WTO. Furthermore, the new rules help clarify the implementation of several multilateral and bilateral trade agreements that Cambodia has concluded in recent years, such as free trade agreements with China and South Korea and the Regional Comprehensive Economic Partnership. Rules of Origin and Cambodia’s Role In international trade, products often make multiple trips before they end up with the consumer—the raw materials may be sourced in one country and processed in another, and then the product may be finished in a third country before the finished product is exported to a different country altogether. Rules of origin determine which country in the production chain qualifies as the country of origin. This is important because the country of origin may be subject to a preferential trading scheme, or there may be legal requirements to declare the correct origin in the country of sale, for example, based on labeling and consumer protection rules. Prior to the new Law on Rules of Origin, ad hoc rules of origin applied in Cambodia, often depending on bilateral agreements, multilateral agreements, or international preferential trading schemes. For example, the EU, US, and Japan have individually adopted preferential trading schemes with selected countries through Generalized Scheme of Preferences (GSP) programs. These GSP programs often set their