In today’s digital age, cyberattacks have become a real threat to organizations worldwide. These attacks can range from phishing and malware to ransomware and distributed denial of service (DDoS) attacks. As the frequency and sophistication of these attacks increase, so does the importance of cybersecurity compliance. In the corporate world, compliance refers to the process of ensuring that a company and its employees adhere to all relevant laws, regulations, standards, and ethical practices—but it should not stop there. Compliance should also encompass asset recovery and disciplinary measures, which can both help organizations address incidents effectively and promote good governance. Cyberattacks are malicious attempts to access or damage a computer system or network, often carried out for financial gain, for political activism, or simply to cause disruption. For instance, a successful attack might involve an attacker creating an email address that closely resembles a legitimate one, perhaps by changing only one or two characters. That email address is then inserted into an existing conversation thread, making it appear as if the user with this email address was already part of the discussion. This tactic can easily deceive a recipient into believing the email was sent from a trusted source, thereby leading them to click on malicious links, provide sensitive information, or even make payments in accordance with the attacker’s request or instructions. Phishing attacks like these are particularly dangerous and can have a serious impact on the ongoing business of a corporation because they exploit the trust and familiarity established in the original email chain. Effective Mitigation Approaches Mechanisms for addressing the aftermath of a crisis provide important recourse to affected organizations, but effective compliance mechanisms can minimize the risk of such crises ever occurring. Companies should therefore prioritize preventative measures and implementation of effective crisis management schemes. Various legal

Thailand’s tax dispute resolution framework has undergone a significant transformation with the enactment of the Act Establishing the Tax Court and the Procedure for Tax Cases (No. 3) B.E. 2568. Published in the Government Gazette on May 27, 2025, the amended act will come into force on November 24, 2025, which is 180 days after its publication. The amended act marks a pivotal shift in the jurisdiction and procedures of the Tax Court, most notably by empowering it to adjudicate certain criminal tax cases for the first time. Background and Rationale The Tax Court was originally established in 1985 as a specialized forum to handle complex tax disputes, including those related to revenue, customs, and excise taxes. The creation of the Tax Court recognized the need for judicial expertise in tax law, given its technical and specialized nature. The latest amendment is designed to address procedural inefficiencies, modernize court processes, and align Thailand’s tax litigation system with international standards. The reform demonstrates Thailand’s commitment to enhancing the efficiency, transparency, and fairness of its tax dispute resolution mechanisms. Key Amendments and Provisions Six of the key changes in the amendment are highlighted below. Expansion of jurisdiction to criminal tax cases. The most significant change is the extension of the Tax Court’s jurisdiction to include criminal offenses under the Revenue Code, customs law, excise tax law, and other tax-related laws that may be specified by royal decree. New sections in the act explicitly grant the Tax Court authority to hear and decide criminal tax cases, so individuals and entities accused of criminal tax evasion or other tax-related crimes will now have their cases heard by judges with specialized tax expertise. The law also clarifies the Tax Court’s jurisdiction when a single act constitutes multiple offenses (some tax-related, some not) or when

As from July 1, 2025, as part of its ongoing efforts to digitalize and streamline the delivery of public services, the Vietnamese government will officially conduct administrative procedures, both online and offline, only via electronic identity (“e-ID”) accounts on the VNeID platform. In particular: Online administrative procedures carried out via the National Public Service Portal or via information systems for administrative procedures at the ministerial or provincial level are required to be implemented by using e-ID accounts only. When receiving dossiers, authorities will be required to check and verify the e-IDs of companies or individuals responsible for conducting administrative procedures. Further, it is worth noting that to complete the registration of an e-ID account for a company, the legal representative of the company must hold a level-2 e-ID account. Compliance Considerations Vietnam’s first regulation of e-ID accounts for individuals and organizations was issued in Decree No. 59/2022/ND-CP dated September 5, 2022, on electronic authentication and identification. This decree was subsequently replaced by Decree No. 69/2024/ND-CP dated June 25, 2024, which governs the same matters. Registration and operation of e-ID accounts are centralized through VNeID, a digital ID app developed by the National Population Data Center under the Ministry of Public Security of Vietnam. Although the registration of e-ID accounts for companies is not explicitly mandated by law, the absence of an e-ID account may hinder companies from completing administrative procedures, including licensing and reporting obligations. Such non-compliance could consequently result in administrative penalties. To mitigate unexpected non-compliance and administrative fines due to the lack of an e-ID account, companies should be well prepared for and implement the registration of a company e-ID account as soon as possible.

The growth of Vietnam’s vibrant digital economy offers tremendous potential but is also a driver of the persistent problem of online intellectual property (IP) infringement. The spectrum of issues faced by IP rights holders runs from copyright piracy on digital services (such as streaming and torrent sites) to the sale of counterfeit goods via e-commerce sites and social platforms to the misuse of rights through misleading use of trademarks. These infringements do not only eat into profits; they damage brand reputation and mislead consumers. As a result, site blocking and keyword blocking have become increasingly important components of the enforcement toolkit available in Vietnam. Legal Framework for Blocking Actions Site and keyword blocking in Vietnam is supported by a growing legal framework, particularly following the 2022 amendment to the IP Law. Prior to this, the legal basis for blocking was scattered across various laws, and internet service providers (ISPs) were only obligated to block access to infringing content upon official requests from authorities. The introduction of Article 198b under the amended IP Law marked a significant shift, establishing a clearer mechanism for rights holders to request site blocking directly. This provision obliges them to act upon valid takedown or blocking requests. In addition to the IP Law, other key legislation includes the Law on Information Technology, the Law on Cybersecurity, the Law on Advertising, and various decrees. Together, these laws provide a more structured and enforceable basis for blocking actions in Vietnam, though practical enforcement still depends on ISP cooperation and the clarity of the infringement evidence. Competent Authorities Previously, rights holders could pursue administrative actions through specialized inspectorates under the Ministry of Science and Technology, the Ministry of Culture, Sports and Tourism, or the Vietnam E-Commerce and Digital Economy Agency (iDEA). However, due to a recent government restructuring,