You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 26, 2026

Myanmar’s Private Security Services Law: Considerations for Foreign Businesses

Myanmar’s Private Security Services Law, enacted on February 18, 2025, together with its implementing Directive on Applications for a Private Security Services License or Permit issued on June 18, 2025, establishes the country’s first comprehensive regulatory framework for both commercial private security service providers and companies that employ in-house security personnel. The framework applies to both Myanmar and foreign entities. For foreign investors and multinational operators, the new regime introduces strict licensing requirements, local content rules, and various approvals that must be carefully considered as part of business planning and compliance processes.

Regulatory Authority and Structure

The governing authority under the Private Security Services Law is the Private Security Services Central Supervisory Committee, formed with the minister of the Ministry of Home Affairs (MOHA) as chairperson, the chief of the Myanmar Police Force as vice-chairperson, and members from other high-ranking officials from relevant ministries, such as Transport and Communications, Defense, Planning and Finance, Investment and Foreign Economic Relations, Legal Affairs, Immigration and Population, Labor, and Commerce.

This Central Committee is the highest regulatory authority and has the power to adopt policies, approve or reject applications for licenses and permits, and decide appeals against administrative actions taken by Supervisory Committees, which operate under the Central Committee at the state and regional level. They are responsible for processing applications, verifying compliance with statutory requirements, submitting applications to the Central Committee with remarks, and issuing licenses and permits once approved. Supervisory Committees also monitor compliance by license or permit holders and impose administrative penalties for noncompliance, while the Central Committee exercises final decision-making authority.

License Requirements for Security Service Providers

To apply for a private security services license, companies must be registered under the Myanmar Companies Law. Foreign companies may also operate a private security services business in Myanmar, subject to compliance with applicable legal and regulatory requirements.

Foreign companies must maintain a minimum fixed deposit equivalent to MMK 100 million (approximately USD 47,619 at the Central Bank of Myanmar’s official exchange rate of MMK 2,100 per USD 1) in foreign currency with Myanma Economic Bank and demonstrate that their operations do not adversely affect state security or the rule of law. Licenses are valid for three years and must be renewed at least three months before expiry.

Foreign-owned license applicants must also disclose:

  • The number of Myanmar and foreign security personnel
  • Qualifications of foreign personnel

Foreign companies must also comply with the rules regarding criteria for both Myanmar and foreign security staff.

Permit Requirements for In-House Security

While licenses are required for private providers of security services, businesses that employ their own in-house security teams of more than 10 personnel must instead get separate permits for doing so. Businesses operating factories, hotels, retail stores, logistics operations, oil and gas sites, and similar premises—including foreign entities—must obtain a permit if they employ more than 10 private security personnel internally.

Security personnel covered by a permit may work only on the permit holder’s own premises, preventing group companies from pooling or cross-assigning security staff. This restriction is particularly relevant to foreign operations managing multiple entities in Myanmar.

Operational and Compliance Obligations

Both license holders and permit holders must ensure the use of only approved uniforms, insignia, and equipment and must maintain strict confidentiality of all client and business information. They are also responsible for ensuring that all employed security personnel comply with applicable laws and regulations.

Furthermore, proper authorization is required for the handling of any arms or ammunition, and prior approval of training courses, trainers, and training facilities must be obtained under the supervision and monitoring of the relevant department or ministry. Noncompliance may result in warnings, administrative fines, suspension or cancellation of a license or permit, and blacklisting from future applications. Criminal penalties may also apply.

Closing Thoughts

Maintaining the security of operations is an important consideration for businesses present in the Myanmar market. The Private Security Services Law is important for both local and foreign businesses to understand, as it introduces a framework that demands careful attention to licensing, operational protocols, and compliance. Given the complexity and evolving nature of the regulations, engaging knowledgeable local counsel is invaluable for ensuring compliance and mitigating risk, allowing businesses to focus on their core operations with greater confidence.

RELATED INSIGHTS​ 

February 25, 2026
Tilleke & Gibbins has updated the Vietnam chapter in the newly released Licensing 2026 guide, published by Lexology Panoramic. The comparative guide provides companies and other interested readers with information on licensing law and practice in various countries around the world. Licensing 2026 provides detailed information on the following topics: Restrictions, laws and licensing arrangements Intellectual property issues: Paris Convention for the Protection of Industrial Property, contesting the validity of licensor’s IP rights, invalidity and expiry of IP rights, security interests, proceedings against third parties, sublicensing, jointly owned IP, first to file, scope of patent protection, trade secrets, copyright Software licensing: Perpetual licensing, legal requirements, user restrictions Royalties and payments, currency conversion, and taxes: Relevant legislation, restrictions, taxation of foreign licensors Competition law issues: Restrictions on trade, legal restrictions, and IP-related court rulings Indemnification, disclaimers, and damages: Prevalence and enforceability of indemnity provisions and contractual waivers of damages Termination: Right to terminate, impact of termination Bankruptcy: Impact of licensee or licensor bankruptcy Dispute resolution: Governing law, arbitration, enforceability, injunctive relief, contractual waivers The Vietnam chapter is available below as a PDF. Readers can gain 30 days of complementary access to the full Licensing 2026 guide and the rest of Lexology Panoramic’s varied offerings through this link.
February 19, 2026
Thailand’s Securities and Exchange Commission (SEC) has overhauled its approach to related-party transactions (RPTs) by issuing new rules that simplify approval processes while expanding oversight. Capital Market Supervisory Board Notification No. TorJor. 46/2568 will replace the longstanding Notification No. TorJor. 21/2551, which has governed RPT compliance for over a decade. The new regulation takes effect on July 1, 2026. Any RPT matters approved by a company’s board of directors or approved for shareholders’ approval before that date remain subject to Notification No. TorJor. 21/2551. The new RPT rules will introduce significant changes that market participants should carefully consider. Consolidated Definitions Under the previous framework, key definitions relevant to RPT compliance were dispersed across multiple sources, including SEC notifications, Stock Exchange of Thailand (SET) regulations, and provisions of the Securities and Exchange Act (before amendments). The new regulation consolidates these definitions into a single notification. Concepts such as “related party” and “connected person,” as well as relevant transaction categories, are now more systematically organized and written in greater detail. The SET has yet to issue corresponding regulations, which should include more detailed related disclosure requirements. Unified Threshold and Mandatory Board Approval The most significant change under the new regulation is the elimination of the multitiered approval framework based on transaction type. Instead of various categories, transactions are now classified as either (1) financial assistance provided to related persons, or (2) other RPTs in order to determine the level of corporate approvals and disclosures for each transaction size in these categories, but the concept remains the same. Under the previous regulation, RPTs were divided into small, medium, and large transactions, with differing approval requirements. The new regulation effectively merges the small and medium categories. As a result, all RPTs must now be approved by the board of directors as a baseline
February 19, 2026
Thailand’s Securities and Exchange Commission (SEC) has issued a new regulation on material transactions (MTs) to govern asset acquisitions and disposals by listed companies and their subsidiaries. The new notification on MT criteria (No. TorJor. 45/2568) from the Capital Market Supervisory Board replaces the long-standing notification (No. TorJor. 20/2551) that has governed such matters. The SEC has also introduced parallel amendments to the country’s related-party transaction rules. The new regulation will take effect on July 1, 2026. Any MT matters approved by a company’s board of directors for shareholders’ approval before that date remain subject to Notification No. TorJor. 20/2551. Following that date, the new MT rules will introduce several significant changes that market participants should carefully consider. Expanded Scope of Material Transactions One of the key changes under the new regulation is the expansion of the definition of MTs, which now expressly covers financial assistance and certain lease and business lease arrangements that are not in the ordinary course of business of the listed company or its subsidiaries. For financial assistance, this includes lending, granting credit, providing guarantees, or entering into any arrangement that increases the company’s financial obligations, particularly where the recipient is facing liquidity issues or unable to repay debts. Other forms of financial support also fall within scope. However, whether the provision of collateral for others qualifies as an MT remains somewhat unclear, since no disposal of assets occurs for the provider of collateral. This issue remains to be carefully considered. For lease-related transactions, the MT rules now specifically include the lease or hire-purchase of all or part of a business or assets operated by or belonging to a listed company or its subsidiaries. New Exemptions The new regulation introduces clearer exemptions for transactions between a listed company and its subsidiaries or among subsidiaries, which
February 10, 2026
Data center and cloud investments are forming a major focus of private-sector investment in Thailand, with tech giants like Amazon, Google, Microsoft, and TikTok, as well as numerous telecom and data center companies, committing significant outlays to data center and cloud development. The country’s Board of Investment (BOI) approved projects worth THB 1.87 trillion in 2025, and THB 746 billion of this was from planned data center investments—by far the largest amount from any single industry. Thailand’s swift rise as a regional data center hub is fueled by surging demand for cloud, AI, and digital services, as well as large-scale investments from global tech firms. The country’s strategic location, competitive power costs, robust fiber infrastructure, expanding IT talent, and supportive government policies—including BOI incentives and streamlined approvals—have made it an attractive destination for scalable and sustainable digital infrastructure investments. The BOI’s proactive approach in updating promoted categories and providing both tax and non-tax incentives further ensures Thailand’s continued growth in this sector. 2025 BOI Changes for Data Centers In the middle of 2025, the BOI responded to the remarkable trend by updating investment‑promotion categories across various sectors (e.g., machinery and electrical equipment, public utilities, digital and innovative industries) to accommodate growing investment in data‑center projects. Before the change, which was detailed in a notification that has applied to investment promotion applications submitted from July 1, 2025, onward, data‑center projects under BOI promotion were granted a single A1 incentive (an eight‑year corporate income‑tax exemption) and subject to one uniform set of conditions. The July 2025 notification restructured promotion for data centers into two categories based on power‑usage efficiency: high‑efficiency data centers and other data centers. Under these rules, qualified high‑efficiency data centers are eligible for an eight‑year corporate income tax (CIT) exemption, while for other data centers this exemption is