As a result of the decree, provisions relating to personal data protection, data subject rights, complaints, civil liabilities, penalties, and grandfather provisions, will now take effect on June 1, 2022.

Thailand has made significant changes to its statutory interest rate framework for the first time in almost a century. Since 1925, the statutory interest rate codified in Thailand’s Civil and Commercial Code (the CCC) has remained at 7.5% per year. But with Covid-19 having an unprecedented impact on the Thai economy, the Thai Government, via emergency decree, has reduced the statutory rate. While the decree is largely aimed at providing relief to hard-hit SMEs and individual debtors, the amendments have broader implications for doing business in Thailand. Main Changes The new interest rate revisions are contained within the Emergency Decree Amending the Civil and Commercial Code B.E. 2564 (2021) (the Emergency Decree), which was published in the Government Gazette on April 10, 2021 and came into effect on April 11, 2021. The Emergency Decree amends Sections 7 and 224 of the CCC, which stated the previous statutory interest rate of 7.5% per year. The Emergency Decree makes three major changes. The first involves a reduction of the statutory interest rate from 7.5% per year to 3% per year in Section 7. The new 3% annual rate is subject to review every three years by the Ministry of Finance. The interest rate is subject to further change later by a royal decree. The second change concerns money debts under Section 224 of the CCC. The previous version of Section 224 stated, among other things, that a money debt based on a default bears interest of 7.5% per year. Under the Emergency Decree, the new actual statutory default interest rate is the statutory interest rate stated in Section 7 with an additional rate of 2% per year. The result is a 5% annual statutory default interest rate. Since the statutory default interest rate is based in part on the Section 7

The Office of Insurance Commission (OIC) is seeking public comments on their recently released draft guidelines on Thailand’s insurance regulatory sandbox. Once enacted, the draft notification will replace the existing OIC insurance regulatory sandbox notification, aiming to broaden the OIC’s authority in order to erase difficulties in the project approval process that have arisen under the current notification. One major change included in this draft notification is that business operators are no longer allowed to conduct “own sandbox” testing. Unlike the notification currently in effect, the new draft notification also does not specify the criteria and procedures for a business operator to apply for a temporary allowance of non-compliance with non-material, test-obstructing requirements in a notification or order from the OIC or the registrar. Participants Eligible participants in the insurance regulatory sandbox—which include life and non-life insurance companies, life and non-life brokers, and other types of business operators with expertise in technology—must have appropriate capital, systems, personnel, and experience for the planned provision of service. Participants in the sandbox must establish measures to ensure that insured parties will receive sufficient information in relation to the project, and a remedial plan must be in place in case of damage arising from errors connected to the project. These measures are similar to those in the existing OIC notification, which requires that such measures must at least cover consumer protection, risk management, reporting obligations, and compliance with applicable laws. Project Requirements The draft notification reduces the number of eligible sandbox project types allowed under the existing OIC notification. When the draft notification is enacted, projects that risk regulatory incompliance, and projects that may adversely affect consumers, financial stability, or trust in an insurance company or the industry as a whole, will no longer be allowed to participate in the insurance regulatory sandbox.

As many are already aware, following the change of government in Myanmar on February 1, 2021, a draft Cyber Security Law was proposed which attracted widespread criticism. However, less attention has been paid to significant amendments to two existing laws, some of which have a similar effect to parts of the draft Cyber Security Law. In other words, while the draft Cyber Security Law has not progressed further and is under public scrutiny, significant elements of it have found their way into law in Myanmar by other routes. Because these amendments are already law, it is very important that individuals and businesses in Myanmar understand their implications. Amendments to the Law Protecting the Privacy and Security of Citizens The Law Protecting the Privacy and Security of Citizens (2017), or the “Privacy Law,” was amended on February 13, 2021, less than two weeks after the military government came into power. These amendments chiefly address the power of the government to conduct searches, seizures, and arrests; to extend detention without judicial oversight; and to carry out broad surveillance and investigation activities that could intrude on individual privacy. The amendments accomplish this by suspending various sections of the Privacy Law for as long as the State Administration Council (the military body now governing Myanmar) is in power. The suspended sections include the following: Section 5: Search, seizure, and arrest without civilian observation The relevant part of Section 5 of the Privacy Law states, “The responsible authorities shall … when acting in accordance with existing law, not enter into a person’s residence or a room used as a residence, or a building, compound or building in a compound, for the purpose of search, seizure, or arrest, unless accompanied by minimum of two witnesses who should comprise Ward or Village Tract Administrators…”. The suspension