You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

July 26, 2021

Laos Issues E-commerce Regulations

Subscribe to Updates

Though online purchases of goods and services have been booming in Laos, the country’s laws and regulations have not kept pace. Providers of legal advice on these activities have therefore had to interpret laws and regulations on traditional physical retail activities instead, and apply them to online activities. However, Laos is making strides toward providing clear legal guidance for e-commerce operations by issuing legal measures to facilitate the regulation of online business activities.

For instance, on June 4, 2021, the new Decree on E-commerce No. 296/GOV (dated April 12, 2021, and published in the Lao Official Gazette on May 20) came into effect to clarify the regulatory framework for e-commerce in the country and to set requirements for electronic purchase contracts.

The decree, which applies only to operators residing or registered in Laos, regulates individuals and legal entities involved in the following activities:

  • Selling goods and services via their own electronic platform (website, program, or other instruction set);
  • Providing electronic marketplace services; and
  • Selling goods and services via electronic marketplaces.

Seller Notification Requirement

Business operators looking to sell goods or services via an electronic platform, either on their own website or application or via an electronic marketplace, must notify the relevant department of the Ministry of Industry and Commerce of their activity. (Existing operators must notify the ministry within 90 days from the decree’s effective date.) Although the chief concern of the decree is to target those whose regular activity is to sell goods and services online, the decree does not address whether those selling occasionally through an electronic marketplace still need to notify the ministry.

Documents for the notification consist primarily of the application form provided by the Ministry of Industry and Commerce, the enterprise registration certificate (i.e., proof of having registered a legal entity in Laos) or a simple ID card for individuals, a copy of the business operating license (for activities that require approval from a line ministry), and a copy of a contract with a payment service provider for payment via an electronic platform. Upon receipt of the necessary documentation, the ministry’s relevant departments or agencies will certify the notification within three working days. This certificate is valid for two years, and must be renewed thirty days before its expiry.

Electronic Marketplace Registration

Electronic marketplaces must be operated via an incorporated legal entity, which means an Enterprise Registration Certificate is a necessary prerequisite to operating an electronic marketplace in Laos. As for technical requirements, electronic marketplaces must obtain a Ministry of Technology and Communications certificate confirming their “technical conformity.” (The process and requirements for obtaining this certificate may be the subject of guidance that is yet to be issued.)

Similar to the grace period for the notification requirement mentioned above, existing electronic marketplace operators have 90 days (from June 4, 2021) to request authorization from the ministry. Upon receipt of the necessary documentation, the ministry’s relevant departments will consider and provide its authorization within five working days. This authorization is valid for three years, and must be renewed thirty days before its expiry.

Foreign Restrictions

Foreign shareholders cannot hold more than 90 percent of the shares of the legal entity operating an electronic marketplace, and the registered capital must be at least LAK 10 billion (approx. USD 1.05 million).

It is important to note that this decree does not replace existing laws and regulations that address certain types of goods or services sold, for which licensing, notification, minimum investment, and other requirements may apply. For instance, foreign participation in the provision of retail and wholesale services in Laos is limited under the Decision on Retail and Wholesale Business. Under this decision, a foreign shareholder who holds up to 50% of the shares in a retail or wholesale business must invest at least LAK 4 billion (approx. USD 423,350). Between LAK 10 billion (approx. USD 1.05 million) and less than LAK 20 billion (approx. USD 2.1 million) a foreign shareholder may hold 70% of the legal entity, while a foreign shareholder must invest at least LAK 20 billion to hold 100% of the shares of the marketplace’s legal entity conducting retail and wholesale services. Similar restrictions are likely to apply for online retail and wholesale businesses.

Transparency

The decree requires business operators of electronic platforms to disclose information on their platforms and activities, as well as on the goods and services sold. Accordingly, information on the business operator, such as its name, address, contact details, and Enterprise Registration Certificate or the relevant operating license, must be displayed on the electronic platform.

Descriptions of goods or services should note the product specifications (size, color, aspect, and so on) following the product labels as applicable, and product-related information such as origins, prices, return and warranty policies, related fees (e.g., shipment and payment methods), and terms and conditions. In addition, information on customers’ “satisfaction and opinion” concerning the goods and services must be displayed on the corresponding electronic platform. The decree also emphasizes that information on the goods or services offered must be realistic and portray products’ actual characteristics.

Product Liability

The decree also addresses liability for the goods and services sold, deeming electronic selling platforms and sellers on electronic marketplaces legally responsible for the goods and services they sell online.

The decree does not assign similar legal responsibility to entities operating electronic marketplaces on which the goods or services are sold. However, electronic marketplace operators are prohibited from authorizing or ignoring the sale of prohibited goods or services on their electronic marketplaces. Accordingly, they  must take a proactive role in the inspection of goods and services sold.

E-commerce Contracts

According to the decree, which endeavors to cover e-commerce contracts specifically (as opposed to electronic contracts more generally), there are two types of e-commerce contracts.

First, e-commerce contracts made via an “online ordering function” are defined as agreements between seller and client for the sale, purchase, or exchange of goods or services, made by electronic means via the online ordering function of an electronic platform created by the “owner of the electronic platform.” Essentially, this means e-commerce contracts that cover transactions made on electronic platforms (other than electronic marketplaces), and assumes that they use electronic means of payment.

The second type of e-commerce contract is one made “via social media,” which is a term in the decree that the regulator interprets as also covering electronic marketplace contracts for the sale, purchase, or exchange of goods or services.

The decree stipulates that the offering of either type of e-commerce contract is governed primarily by the rules provided in the electronic platform’s terms and conditions. Upon acceptance of the offer by the seller, the e-contract will be deemed formed. The offer will be nullified if the seller does not respond within 12 hours (unlike the 15 days for a traditional contract in writing), unless otherwise stipulated in the terms and conditions of the electronic platform. The client may also cancel its offer before receiving a response from the seller.

Both types of e-commerce contracts must remain accessible to clients after the transaction, (e.g. through archives and purchase histories).

For e-commerce contracts made via the online ordering function of an electronic platform (not on an electronic marketplace), the electronic platform must have a system that allows clients to review, add, amend, confirm, or cancel an offer before formally submitting it by means of the online ordering function. In case of cancellation by the client, electronic platforms must provide clients with evidence that the notification to cancel the contract was sent.

Conclusion

E-commerce activities in Laos have typically had to rely on extensive interpretation of laws that were not made to address e-commerce. The new e-commerce decree discussed in this article is an example of how the government is working to update the regulatory framework to sustain promising high-tech sectors such as e-commerce, fintech, and others. As Laos remains a relatively untapped market in these areas, the Decree on E-commerce eases both local and international investors’ concerns about launching operations by clarifying some key issues. The decree does not address sanctions for noncompliance, and questions remain regarding some of the mandatory requirements (such as the “technical requirements”) to register an electronic marketplace. Therefore, in its current state full implementation of the decree may require subsequent guidance from the authorities.

Related Professionals

Industries

Consumer Products

Technology

Practices

Corporate/M&A

Location

RELATED INSIGHTS​ 

September 26, 2023
Cambodia has issued a set of regulations that aim to encourage greater energy efficiency from appliances marketed in the country. The regulations follow Cambodia’s adoption of its National Energy Efficiency Policy, which sets out the government’s energy efficiency targets and policies to reach them by 2030, including the ambitious national target of reducing the country’s total energy consumption by at least 19%. This set of regulations for appliances marketed in Cambodia is contained in Sub-Decree No. 254 on the Management and Improvement of Energy Efficiency of Electrical Appliances, dated August 11, 2023. This sub-decree sets out product registration and energy efficiency labeling requirements for electrical appliances marketed in Cambodia. It further provides that appliances should meet energy efficiency standards and all other mandatory standards that apply to electrical appliances. During the product registration process, the appliances are checked against such standards, and registration is only granted if the standards are met. The sub-decree identifies the Ministry of Mines and Energy as the main ministry responsible for the implementation of the sub-decree. To assist with the wide scope of regulations as set by the sub-decree, it further appoints assisting ministries that may implement and enforce only certain aspects. These effective implementation and enforcement mechanisms suggest that once the sub-decree’s 12-month implementation period has passed, there is likely to be a rather strict enforcement approach to the requirements. Key Features of the Sub-Decree Several mandatory standards have already been applied to most electrical appliances over the past years, but the required product registration process to check for compliance with those standards has not always been completed by those importing, distributing, or manufacturing electrical appliances in Cambodia. The new sub-decree clearly mandates a product registration requirement as a check to verify the applicable standards are met, and sets penalties for non-compliance. Penalties
Read More
September 26, 2023
On September 14, 2023, Thailand’s Personal Data Protection Committee (PDPC) published a notification on the requirements for the appointment of a data protection officer (DPO) in the Government Gazette, taking effect on December 13, 2023. The notification on appointing a DPO lays out the criteria for what constitutes processing of personal data requiring “regular monitoring of the personal data or the system” by reason of “having large-scale personal data,” which requires data controllers and data processors to appoint a DPO under the Personal Data Protection Act B.E. 2562 (PDPA). Criteria After a hearing on the draft DPO appointment notification in July, the published version has been slightly amended while the main criteria for appointment of a DPO are still the same. These have been finalized as follows: When determining whether processing of personal data requires regular monitoring due to having large-scale personal data, only the “core activity” of the data controller or data processor is to be taken into consideration. The term “core activity” denotes an essential and integral activity directly related to the primary operations of the data controller or data processor and does not include any supplementary business activities (e.g., human resources and information technology activities). “Processing activities that require regular monitoring of personal data” refers to activities relating to tracking, monitoring, analyzing, or predicting the behavior, attitude, or profile of individuals, and generally involves the processing of personal data in a systemic manner on a usual or regular basis. Examples include membership card programs, credit scoring, insurance premium consideration, fraud prevention, processing of personal data by computer network system service providers or telecommunications operators, behavioral advertising, and so on. To determine whether processing activities constitute “large-scale processing of personal data,” various factors are considered: Volume, type, or nature of personal data processed; Duration or permanence of
Read More
September 21, 2023
Myanmar’s Ministry of Commerce has announced its E-commerce Guidelines to regulate stakeholders engaging in e-commerce. The guidelines—which were issued on September 5, 2023, and took immediate effect—are mandatory for e-commerce business operators (both entities and individuals), and failure to comply with the guidelines’ requirements may result in penalties under relevant laws. The E-commerce Guidelines come as Myanmar seeks to increase its regulation of e-commerce activities. The guidelines were preceded by a July 2023 notification requiring e-commerce business operators to register their activities with the Ministry of Commerce by January 21, 2024. Definitions “E-commerce” is defined as the sale of goods or services on the internet or other digital platforms. The term also covers sales promotions, marketing, logistics, ordering, and delivery. An “e-commerce platform entrepreneur” is a person who manages an e-commerce platform where two or more entrepreneurs can conduct e-commerce. An “e-commerce business operator” is a person operating or authorized to operate e-commerce activities. This includes e-commerce platform entrepreneurs, entrepreneurs selling on e-commerce platforms, and sellers through social media platforms. Electronic Contracts Acceptable forms of electronic contracts, which must comply with the Electronic Transactions Law, Contract Act, and other relevant laws, include: Click-wrap, click-through, and web-wrap contracts; Browse-wrap contracts; and Agreements between seller and buyer on social media platforms, such as by accepting or rejecting an offer via direct message. Samples of contract forms are appended to the guidelines. Consumer Protection Disclosure notices for consumers must be comprehensible, correct, consistent, simple, accessible, and visible. They can be written in Myanmar language, English, or Myanmar language and another language. They must also comply with the relevant provisions of the Consumer Protection Law. The guidelines provide that if the agreed delivery date is eclipsed by more than 15 days, the consumer may terminate the contract and request a full refund of
Read More
August 31, 2023
When your company suffers a data breach, taking prudent, careful action can limit and perhaps even rectify some of the damage. First of all, it is important to document everything, starting with the time the data breach was discovered. Secure the data systems and preserve all evidence so that investigators can determine what happened, and begin following the protocol that all companies handling personal data should have in place to guide their data breach response. It is also crucial to seek timely legal assistance to ensure that every aspect of the response is planned and carried out according to the law. While applicable legal advice for each situation can only be obtained by consulting a legal advisor, this guide gives an overview of what companies in Southeast Asian jurisdictions can expect if they suffer a data breach. This guide from Tilleke & Gibbins is a quick-reference resource covering key regulatory issues regarding data breach responses in Cambodia, Laos, Myanmar, Thailand, and Vietnam. The full guide can be downloaded through the button below.
Read More