On June 17, 2026, Indonesia’s National Agency of Drug and Food Control (BPOM) issued BPOM Regulation No. 10 of 2026 on Nutritional Information on Processed Food Labels. The new regulation, which revokes three previous nutrition labeling regulations, introduces several notable changes affecting food and beverage manufacturers, importers, and distributors. These changes range from updated nutrient reference values and serving-size requirements to the introduction of the Nutri-Level front-of-pack labeling system for certain beverage products. Businesses operating in Indonesia should carefully review these developments and assess their products’ compliance with the new requirements during the transition period. Implementation of the Nutri-Level Labeling System To implement the recently issued decree on Nutri-Level labeling, BPOM Regulation No. 10 of 2026 stipulates the requirements to implement the Nutri-Level labeling system on the front-of-pack. Under the new framework, ready-to-drink beverages, powdered beverages, and liquid or solid concentrates are required to display Nutri-Level labeling on the front label of their packaging. The Nutri-Level labeling system classifies products into color-coded levels A through D based on their sugar, sodium, and total fat content. The applicable Nutri-Level is determined based on the lowest level measured in the assessment of sugar, sodium, and total fat content. For products classified as level C or D, the Nutri-Level label must be accompanied by information on the relevant sugar, sodium, and total fat content per 100 ml of the ready-to-consume product. Products classified as level A or B may either display only the Nutri-Level designation or display the Nutri-Level together with the relevant nutritional information per 100 ml. Minimum Vitamin and Mineral Content Required for Declaration BPOM Regulation No. 10 of 2026 introduces a stricter threshold for the declaration of vitamins and minerals in the nutritional value information section (ING). Vitamins or minerals may only be declared if they are present at a

The drug registration process in Vietnam will be simplified, particularly for foreign applicants, following the recent issuance by Vietnam’s Ministry of Health (MOH) of a new circular that is expected to reduce administrative hurdles. Circular No. 32/2026/TT-BYT on the registration of drugs and medicinal ingredients (Circular 32) was issued on July 29, 2026, and will take effect on October 1, 2026, replacing Circular No. 12/2025/TT-BYT. Key provisions of the new circular are discussed below. Five-Year Data Exclusivity and Five-Month Public Disclosure Framework Circular 32 updates data protection guidelines by explicitly referencing Article 128 of the amended Intellectual Property Law, which sets out that new drugs supported by clinical trial data submitted for the first time will be granted a five-year data exclusivity period from the date of the initial marketing authorization (MA) approval. Subsequent applications that rely on the originator’s protected data will not be eligible for approval from the date of submission of the originator’s registration dossier until five years after the first MA is granted. Furthermore, in accordance with the new regulations, the regulatory authority must publicly disclose information on subsequent applications five months before the granting of MA, providing originator companies with an opportunity to exercise and enforce their intellectual property rights. Simplified Requirements for Foreign Legal Documents Circular 32 expands the circumstances under which legal documents issued by foreign authorities are exempt from consular legalization and authenticity verification requirements. Specifically, such documents may be exempt if the Drug Administration of Vietnam (DAV) is able to verify their authenticity directly through official electronic means, including written confirmation or email correspondence sent directly to the MOH by the competent foreign authority, or publicly accessible English-language databases maintained by recognized foreign regulatory authorities. In addition, the new circular permits the submission of electronic notarized copies of legal documents

Tilleke & Gibbins has contributed the Vietnam chapter to Fintech 2027, a global guide published by Lexology Panoramic that provides comparative insights into the legal and regulatory frameworks governing fintech businesses across multiple jurisdictions. The Vietnam chapter offers a comprehensive overview of the country’s rapidly evolving fintech landscape, examining both the regulatory environment and practical considerations for businesses operating in or entering the Vietnamese market. Topics covered include: Fintech landscape and initiatives: General innovation climate; government and regulatory support Financial regulation: Regulatory bodies; regulated activities; consumer lending; secondary market loan trading; collective investment schemes; alternative investment funds; peer-to-peer and marketplace lending; crowdfunding; invoice trading; payment services; open banking; robo-advice; insurance products; credit references Cross-border regulation: Passporting; requirement for a local presence Sales and marketing: Restrictions on the promotion and marketing of financial products and services Cryptoassets and tokens: Distributed ledger technology; cryptoassets; token issuance Artificial intelligence: Regulatory framework governing AI systems and AI-enabled financial services Change of control: Notification and consent requirements for regulated businesses Financial crime: Anti-bribery and anti-money laundering procedures; regulatory guidance Data protection and cybersecurity: Data protection obligations; cybersecurity requirements applicable to fintech businesses Outsourcing and cloud computing: Outsourcing of material functions; use of cloud computing in the financial services industry Intellectual property rights: IP protection for software; employee- and contractor-created IP; joint ownership; trade secrets; branding; remedies for infringement Competition: Competition law issues affecting fintech businesses Tax: Incentives for innovation and investment; developments affecting tax and compliance obligations Immigration: Immigration options for recruiting skilled foreign personnel; special measures available through Vietnam’s international financial centers The chapter also examines a number of significant recent developments shaping Vietnam’s fintech sector, including the introduction of the country’s first comprehensive regulatory framework for cryptoassets, the adoption of a dedicated law on artificial intelligence, implementation of the banking regulatory sandbox,

On July 23, 2026, the Bank of Thailand (BOT) released for public comment its draft Notification on Digital Channel Security, which would significantly expand the scope and stringency of Thailand’s existing mobile banking security framework. If finalized in its current form, the draft notification would extend mandatory security requirements to credit card providers and credit providers, cover internet banking in addition to mobile applications, phase out SMS one-time passwords (OTPs) for transaction authentication, and introduce biometric verification requirements for high-value transactions. The public comment period is open through August 24, 2026. Background The BOT’s existing Mobile Banking Security Notification, issued in 2024, sets minimum security standards for financial institutions, specialized financial institutions (SFIs), and e-money providers, significantly reducing “money-draining app” fraud. However, fraudsters have since shifted to nonbank providers and internet banking channels, prompting the BOT to propose broader security requirements. Expanded Scope of Regulated Entities and Channels The existing Mobile Banking Security Notification covers only financial institutions, SFIs, and e-money providers offering mobile banking services. The draft expands coverage in two key areas: entities and channels. On the entity side, it adds credit card providers and credit providers that offer fund transfers to third parties at other financial service providers or that provide cash withdrawal services to individual retail customers. On the channel side, it broadens coverage to include internet banking in addition to mobile banking. Strengthened Customer Authentication The draft introduces enhanced authentication requirements in three areas: Service enrollment and device changes. Providers must implement rigorous identity verification, notify customers of enrollment results through out-of-band communication channels, and adopt risk-mitigation measures such as cooling-off periods and temporary transaction limits. Transaction-level authentication. Providers must use two-factor authentication for fund transfers, cardless ATM withdrawals, and transaction limit increases. Secure authentication factors. Key requirements include the following: “What-you-know” factors must