You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

July 4, 2024

Comparing EU, Southeast Asia Approaches to AI Regulation

Subscribe to Updates
Law360

The rapid development and deployment of artificial intelligence in various industries is increasingly attracting the attention of regulators, who aim to encourage the progression of AI technologies while ensuring their responsible use.

Recent regulatory developments around the world, including in the European Union and Southeast Asia, serve as evidence of this emerging trend.

Here we shall discuss the effect of AI regulatory approaches in the  EU on Southeast Asian countries.

Approach and Action

The EU Artificial Intelligence Act has been officially adopted by EU colegislators and will enter into force 20 days after its publication in the EU Official Journal.[1]

Most of its provisions will apply two years after its entry into force.

The act establishes a harmonized EU legal framework, aiming at ensuring that AI systems placed on and utilized in the EU market are safe, have managed risks, and are aligned with EU fundamental rights and values.

Countries in Southeast Asia, predominantly governed by civil law systems, often adopt statutory frameworks similar to those in the EU when addressing new legal matters.

In the rapidly developing field of AI, Southeast Asian countries are adopting a wait-andsee approach toward global regulatory trends. This cautious stance allows them to observe and analyze international developments in AI regulation before crafting their own frameworks.

Compared to the EU, countries in Southeast Asia are generally more focused on using AI for national development. Common themes include building human resource capability, developing ecosystems and building infrastructure. Some countries emphasize governance and ethics more than others.

Over the past five years, governments across Southeast Asia have been focusing on promoting AI by implementing national policies to strengthen AI promotion and governance.

While there may be less regional integration in the approach to AI of countries in Southeast Asia, there are some efforts to create a unified stance.

In February, the Association of Southeast Asian Nations released its guide on AI governance and ethics. The guide is for policymakers and organizations in ASEAN to rely on when they design, develop and deploy AI technologies.[2]

The guide encourages regional-level initiatives, alignment within Southeast Asian nations and interoperability of AI frameworks across jurisdictions.

The EU AI Act establishes a shared supervision and enforcement regime between the EU member states’ competent authorities and the European Commission.

In turn, despite the absence in Southeast Asia of a regional governing body as strong as in the EU, many countries in the region have already established new bodies or assigned existing ones to oversee AI matters and implement national policies on AI within their jurisdiction.

Draft AI Regulations in Southeast Asia

Some countries in Southeast Asia are in the process of drafting AI-specific legislation.

Thailand, for example, is currently in the process of drafting two AI-related laws to promote and regulate AI systems:

  • The Draft AI Innovation Promotion and Support Act aims to establish an AI sandbox and contains provisions on data sharing, AI standards and certification, and risk management;[3] and
  • The Draft Royal Decree on AI System Service Business is aligned with the principles of the EU AI Act, highlighting the necessity of risk assessment, reporting specifications, and the establishment of specific steps to reduce AI risks.[4]

The rollout of the EU AI Act is expected to influence Thai authorities to make further revisions and additions to the draft legislation.

Impact of Southeast Asia AI Regulations on EU

The EU AI Act has increasing relevance to Southeast Asia materially, and how the Southeast Asian regulatory landscape unfolds will in turn have significant relevance to the EU.

First, the main obstacle for Southeast Asian countries adopting an approach similar to the EU’s AI playbook is that the region is less integrated, both as a market and as a regulatory environment.[5]

In January 2021, ASEAN adopted the ASEAN Digital Masterplan 2025, calling for a regional policy for best practice guidance on AI governance. Based on this guidance, it is apparent that most Southeast Asian governments have taken a softer and gentler approach to AI regulation compared to the EU, focusing on voluntary guidelines and codes of conduct, rather than hard law.[6]

As emerging markets, ASEAN member states are wary of affecting business confidence. Emerging markets tend to stay away from overregulation, because it could discourage innovation.

ASEAN guidelines motivate governments to foster tech talent and to upskill workforces, as well as to invest in research and development rather than to impose stringent restrictions, because of fear of reducing business opportunities.

Southeast Asian countries taking a more business-friendly approach to AI regulation can be a possible setback to the EU’s push for global coordination.[7]

In 2023, EU officials traveled across Asian countries to convince ASEAN governments to follow its lead in enforcing rules. Unlike the EU AI Act, the ASEAN AI guide asks companies to take countries’ cultural differences into consideration.

The comparatively relaxed approach of ASEAN member states may become a barrier to establishing a global standard for AI, as the EU has desired with its landmark AI legislation.

In the wake of more relaxed rules in Southeast Asia, the EU AI Act has received pushback from the business community. Over 160 business executives have signed a letter warning that this legislation could affect the EU’s competitiveness, investment and innovation.[8]

Southeast Asian policymakers will be observing the impact on the EU’s digital economy of the EU AI Act. Since Southeast Asia’s AI policies are more relaxed, this could attract more investor funding globally and from the EU specifically, especially for innovation such as AI sandboxes, research and data centers.

In 2020, Southeast Asia and the EU agreed to become strategic partners, and the EU pledged €10 billion ($10.7 billion) for connectivity projects in the region, agreeing to a digital agreement with Singapore and to an energy partnership with Vietnam.[9]

Southeast Asia is projected to reap a $950 billion increase in regional total gross domestic product from the influx of AI-related businesses.[10] Additionally, Southeast Asia remains a viable AI hub for European companies looking to diversify their AI-related product manufacturing.

While EU companies may face increased burdens due to the need to maintain higher standards to comply with the EU AI Act, this situation might have a silver lining. As noted, many Southeast Asian countries are closely observing the EU’s approach and are likely to adopt similar AI regulations into their national laws in the next few years.

If this occurs, EU companies that are already in compliance with the stringent requirements of the EU AI Act will likely find it easier to adapt to the new AI regulations in Southeast Asian countries. This early compliance could give them a competitive advantage in Southeast Asian markets.

Conclusion

Both the EU and Southeast Asian countries have established bodies to oversee AI matters. While the EU has officially adopted the EU AI Act, many Southeast Asian countries have only enacted national strategies and guidelines, with some drafting their national AI legislation. Overall, there is strong support from Southeast Asian governments for AI use, backed by policies promoting such use.

The legislative journey of the EU AI Act has drawn significant global interest. The act, as the first comprehensive legal framework for AI worldwide, is prompting other jurisdictions to develop their own AI policies and laws.

It is expected that much like the way the General Data Protection Regulation has significantly influenced data protection laws across the globe, the EU AI Act will have a major impact on AI laws worldwide. As the GDPR set a global standard for data protection, the EU AI Act could become the international norm for AI governance.

Southeast Asia’s current relaxed regulatory landscape aims to attract Big Tech investments. Southeast Asian countries may follow the EU approach, but will likely await the EU AI Act’s full implementation for practical insights into AI regulation.

Businesses should monitor AI regulatory developments in the EU and Southeast Asia, assess their products and processes, and revise their compliance strategies accordingly.

 

Anne-Gabrielle Haie is a partner at Steptoe LLP.

Nop Chitranukroh is a partner at Tilleke & Gibbins International Ltd.

Steptoe associate Maria Avramidou and Tilleke & Gibbins associate Rada Lamsam contributed to this article.

 

[1]  Proposal for a Regulation of the European Parliament and of the Council laying down harmonized rules on Artificial Intelligence (EU Artificial Intelligence Act) And Amending Certain Union Legislative Acts (COM/2021/206 final): https://eur-lex.europa.eu/legalcontent/EN/TXT/?uri=celex%3A52021PC0206; Press release of the Council of the EU on the adoption of the EU AI Act: https://www.consilium.europa.eu/en/press/press-releases/2024/05/21/artificialintelligence-ai-act-council-gives-final-green-light-to-the-first-worldwide-rules-on-ai/.

[2]  ASEAN Guide on AI Governance and Ethics: https://asean.org/wpcontent/uploads/2024/02/ASEAN-Guide-on-AI-Governance-andEthics_beautified_201223_v2.pdf.

[3]  Draft AI Innovation Promotion and Support Act (Only available in Thai).

[4]  Draft Royal Decree on AI System Service Business: https://bact.cc/f/2022/10/202210-draft-service-business-that-use-airegulation-hearing-chula-onde.pdf (Only available in Thai).

[5]  https://eastasiaforum.org/2021/07/14/is-the-eus-ai-legislation-a-good-fit-for-asean.

[6]  AI regulations: What can the EU learn from Asia? https://www.dw.com/en/airegulations-what-can-the-eu-learn-from-asia/a-68203709.

[7]  Reuters, “Exclusive: Southeast Asia eyes hands-off AI rules, defying EU ambitions”: https://www.reuters.com/technology/southeast-asia-eyes-hands-off-airules-defying-eu-ambitions-2023-10-11/.

[8]  DW, AI regulations: What can the EU learn from Asia?: https://www.dw.com/en/airegulations-what-can-the-eu-learn-from-asia/a-68203709.

[9]  GIS Reports Online, The future of Europe’s Southeast Asia engagement: https://www.gisreportsonline.com/r/eu-asean/; East Asia Forum, Charting the future of Southeast Asian AI governance: https://eastasiaforum.org/2024/05/21/charting-the-future-of-southeastasian-ai-governance/.

Related Professionals

Industries

Technology

Locations

RELATED INSIGHTS​ 

September 11, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published a new five-year master plan that will bring significant regulatory changes to the broadcasting and digital media sectors, including formal licensing requirements for internet-based audiovisual services. The Master Plan for Broadcasting and Television, 3rd Edition (B.E. 2569–2573/2026–2030) was published in the Government Gazette on September 1, 2026, and will affect OTT platforms, internet-based audiovisual service providers, and traditional broadcasters. Licensing Reform The NBTC will develop new licensing frameworks ahead of existing digital television license expirations, which are slated to occur between 2028 and 2030. This creates both uncertainty and opportunity for incumbents and new market entrants. New licensing criteria will also be developed for audiovisual services delivered over the internet, meaning previously unregulated internet-based providers may face licensing, fee, and content obligations for the first time. The plan also calls for a new law to govern converged communications services. OTT Regulation and Content Oversight The plan explicitly acknowledges and aims to lessen the regulatory asymmetry between traditional broadcasters—which are subject to licensing, fees, and content regulation—and internet-based services that currently face fewer obligations. The NBTC intends to develop regulatory frameworks to bring internet-based audiovisual services, including OTT platforms, streaming services, and user-generated content platforms, under content, consumer protection, and licensing requirements. Consumer Protection and Digital Rights The NBTC will strengthen its oversight of broadcasting, television, and telecommunications operators to ensure compliance with consumer protection and personal data protection requirements. This includes updating relevant notifications and orders and more strictly enforcing rules against practices that unfairly exploit consumers. These measures may layer NBTC-specific requirements on top of Thailand’s existing Personal Data Protection Act obligations. Stricter enforcement against practices that exploit consumers is a priority, with particular scrutiny on advertising practices. The NBTC will modernize complaint resolution processes, meaning service providers should
Read More
September 7, 2026
On September 4, 2026, Thailand’s prime minister convened the first meeting of the Data Center Business Policy Committee. The committee endorsed a draft policy framework for the data center industry and tasked four subcommittees with developing the standards that would sit beneath it, shifting away from fragmented, agency-by-agency approvals toward a unified national strategy aiming to maximize economic value while managing environmental and infrastructure concerns. Proposed Scope and Pillars of the National Data Center Policy Framework The proposed framework would cover all types of data centers, including internal or captive facilities operated within a company or its affiliates, rather than only commercial third-party providers. If adopted in this form, companies running private data centers purely for internal purposes would also become subject to regulatory oversight. Minimum safety and operational standards would be established, with uniform enforcement across all categories. The committee endorsed a draft policy framework with four key pillars: Industrial classification: Data centers exceeding 2 MW would be classified as industrial operations, which may require factory licenses and environmental impact assessments under the Factory Act. Resource pricing: Utility rates would be structured to reflect both direct and indirect costs, supporting green energy and green data center standards. Centralized screening: A centralized review would evaluate project suitability and resource allocation. Operators may be required to submit proposals through periodic “pitching” rounds, where projects are competitively assessed on their potential economic and strategic benefits to Thailand. Digital ecosystem: The framework would prioritize data sovereignty, tax incentives, and conditions promoting domestic digital businesses, AI, and cloud infrastructure. Multidimensional Evaluation Criteria and Subcommittees Four subcommittees will be established to develop standards responsible for the following dimensions: Economic: Criteria for assessing the economic viability of data center projects, for use in prioritizing data centers based on infrastructure readiness, demand type (including AI factories),
Read More
September 4, 2026
Foreign business restrictions on telecommunications, treasury center businesses, and intragroup support services were eased when Thailand published the Ministerial Regulation Prescribing Service Businesses Not Requiring Permission for Foreign Business Operations (No. 5) B.E. 2569 (2026) in the Government Gazette on August 28, 2026. The ministerial regulation expands the categories of service businesses that foreign investors may operate without a foreign business license (FBL) under the Foreign Business Act B.E. 2542 (1999) (FBA). Of particular relevance to the telecommunications, fintech, and technology sectors, the ministerial regulation exempts: Type 1 telecommunications licensees, which do not have their own networks; Treasury center businesses operated in accordance with Thailand’s exchange control regulations; and Certain intragroup administrative, human resources, and information technology management services. Telecommunications Services Foreign-owned businesses providing telecommunications services under a type 1 telecommunications license may now operate without obtaining an FBL. This may streamline market entry for qualifying telecommunications and digital infrastructure businesses. The exemption applies only to the FBA licensing requirement. Operators must continue to comply with applicable requirements under the Telecommunications Business Act and the regulations of the National Broadcasting and Telecommunications Commission, and the change does not affect foreign ownership restrictions applicable to type 2 or type 3 telecommunications businesses. Treasury Center Businesses The ministerial regulation also exempts qualifying treasury center businesses from the FBL requirement. This may facilitate centralized treasury functions in Thailand, including liquidity management, foreign exchange management, and intragroup funding arrangements. Treasury center operations remain subject to applicable requirements of the Bank of Thailand and other competent authorities. Intragroup Administrative, HR, and IT Services Certain administrative, human resources, and information technology management services provided between affiliated entities are also exempt, provided the relevant entities satisfy prescribed ownership or management criteria. The exemption is available where the service provider and recipient are related through specified ownership
Read More
September 2, 2026
Thailand and China have a longstanding and significant trade relationship, which increasingly extends to e-commerce and digitally enabled supply chains. While these channels create new opportunities for businesses to reach consumers across borders, their growth also brings greater exposure to intellectual property (IP) infringement across jurisdictions and online platforms. Effective cooperation between the two countries’ enforcement authorities has therefore become increasingly important. To strengthen cooperation in this area, Thailand and China signed a memorandum of understanding (MOU) on IP enforcement in Beijing on July 20, 2026, during the Thai prime minister’s official visit to China. Officially titled “Memorandum of Understanding Between the State Administration for Market Regulation of the People’s Republic of China and the Ministry of Commerce of the Kingdom of Thailand on Cooperation in the Field of Intellectual Property Enforcement,” the MOU forms part of a broader bilateral agenda covering industrial and supply chains, participation by micro, small, and medium-sized enterprises (MSMEs), cooperation associated with the ASEAN–China Free Trade Area 3.0, and progress on the registration of Thai geographical indications in China. The MOU establishes a bilateral framework for cooperation and coordination in five broad areas: Strengthening dialogue in IP enforcement; Enhancing information sharing; Facilitating the enforcement of IP rights in cases arising in the parties’ domestic markets and on online platforms, in accordance with their respective domestic laws; Promoting cooperation in IP enforcement training and human resource development; and Undertaking other cooperation activities agreed upon by both sides. The Department of Intellectual Property (DIP) will serve as the principal coordinating agency for Thailand, while the Bureau of Law Enforcement and Inspection in China’s State Administration for Market Regulation (SAMR) will serve in that role for China. The framework is particularly relevant to the growth of e-commerce, as it covers infringement in the domestic markets and on
Read More