Tilleke & Gibbins has updated the Cambodia, Myanmar, Thailand, and Vietnam chapters in Multilaw’s Global Data Protection Guide, which collects expert advice from Multilaw member firms in 90 jurisdictions around the world (including a Laos chapter, which is also authored by Tilleke & Gibbins). The guide provides answers to key issues concerning the fast-developing data protection and privacy laws around the world, and helps data protection officers and in-house counsel understand how the regulatory regime for data protection can affect their organizations in various jurisdictions. Each section of the guide identifies the main laws that govern data protection in that jurisdiction, and gives a detailed overview of the legal principles in place as well as the enforcement authorities responsible for overseeing compliance. The guide also covers issues related to data subject rights, data protection officers, impact assessments, data breach notification requirements, and cross border data transfers. The use of personal data in marketing is also considered, with specific information on electronic marketing rules, cookies, and marketing to businesses and consumers. Multilaw, of which Tilleke & Gibbins is a longtime member, is a global network of carefully selected independent law firms able to provide expert legal advice in complex environments around the globe. The full guide is available for free on the Multilaw website.

On December 10, 2025, the National Assembly of Vietnam passed a new Cybersecurity Law, which will take effect on July 1, 2026. The new Cybersecurity Law was developed based on the consolidation of the 2018 Cybersecurity Law and the 2015 Law on Network Information Security. While the final approved version of the new Cybersecurity Law has not yet been published, according to official reports, the following notable requirements are confirmed to be included: The new Cybersecurity Law dedicates a specific article to prohibited acts related to cybersecurity, under which it strictly prohibits posting or disseminating information online that propagandizes against the Socialist Republic of Vietnam. The law also prohibits, among other things, (i) the appropriation, trading, seizure, or intentional disclosure of information classified as state secrets, work secrets, business secrets, personal secrets, family secrets, and private life; (ii) intentionally eavesdropping, recording, or filming online conversations without authorization; and (iii) the use of artificial intelligence (AI) or new technologies to conduct prohibited acts. The Ministry of Public Security (MPS) has the authority to require enterprises providing telecommunications, internet, and online services, as well as system administrators, to remove information violating cybersecurity laws from systems under their management. The MPS is also assigned responsibility for ensuring information security in cyberspace and data security, establishing mechanisms for IP address identity management, verifying digital account registration information, and issuing warnings and sharing information on cybersecurity threats. Information systems are classified into five levels (similar to the 2015 Law on Network Information Security) based on the degree of harm to national security and social order if an incident occurs. The MPS is the lead agency assisting the government in state management of cybersecurity. The Ministry of National Defense is responsible for managing military information systems, and the Government Cipher Committee manages cryptographic and cipher

On November 18, 2025, Thailand’s Ministry of Finance issued an announcement that revises and expands the scope of goods that may be imported duty-free for educational, research, and cultural purposes, streamlining the framework for institutions and organizations engaged in academic and scientific activities. The announcement, which took effect the following day, amends customs duty exemptions under section 12 of the Customs Tariff Decree B.E. 2530 (1987). Expanded Institutional Coverage The announcement broadens the types of entities eligible to import duty-free goods. Under the revised framework, the Ministry of Higher Education, Science, Research and Innovation (MHESI) now certifies imports for educational and research purposes by: Public and private educational institutions operating under the National Education Act; Government agencies with statutory mandates for education and research; and Associations and foundations whose objectives include educational research. This expansion recognizes a wider range of organizations engaged in knowledge-based activities and removes previous limitations that may have excluded certain nonprofit entities. To qualify for duty exemption, goods must be imported specifically for educational and research use, as certified by the MHESI. Additionally, equivalent goods must not already be available from domestic producers, although the certifying ministry may approve imports of domestically available items if it determines that foreign procurement is critically necessary. Categories of Duty-Free Goods The announcement specifies seven categories of goods eligible for duty exemption: Newspapers, printed materials, and documents Art objects and collectibles related to education, science, or culture Audiovisual equipment for educational, scientific, or cultural purposes Scientific materials, instruments, and equipment Goods for persons with disabilities Musical instruments, sports equipment, and skill-enhancement tools Art and architecture education equipment Qualification Procedures Before importing goods under this exemption, operators must secure certification from the MHESI. This certification process requires demonstrating that the goods will be used for educational or research purposes and,

As Thailand transitions into an aged society, retirement policy and workplace protections for older workers have come into sharper focus. With public sentiment increasingly open to working beyond the traditional retirement age, questions about employee rights and employer obligations are more relevant than ever. In October 2025, Prime Minister Anutin Charnvirakul proposed increasing the statutory retirement age to 65 for government officers, citing Thailand’s aged-society status and the potential social and economic benefits of longer working lives. While academics and stakeholders have raised concerns about systemic impacts, public opinion remains divided, with many workers signaling a willingness to continue working beyond the current norm. Against this backdrop, it’s worth revisiting what the Labor Protection Act B.E. 2541 (1998) (LPA) requires in regard to retirement and severance pay. This article explains the current legal landscape under the LPA, with a focus on retirement and severance pay for employees over 60, recent judicial developments, and practical options for structuring postretirement engagements. Retirement as Termination Under the LPA Under the LPA, retirement—whether set by agreement between employer and employee or unilaterally stipulated by the employer—is deemed a termination of employment. As a result, employees who retire under such terms are entitled to severance pay. The law also adds a default rule: if there is no agreed or prescribed retirement age, or if the prescribed retirement age exceeds 60, an employee aged 60 or older may declare an intention to retire. The declaration takes effect 30 days after notice, and the employer must pay severance accordingly. In short, retirement triggered by agreement, the employer’s work rules, or an employee’s valid notice is treated as a termination, and statutory severance pay is owed. Hiring or Rehiring Employees Over 60 Practical issues arise when an employer’s work rules set a retirement age that does not