Effective June 22, 2026, Thai Industrial Standards (TIS) for food contact paper and cooking paper will be enforced as mandatory for sale in the Thai market. This move has important implications for product licensing and tightens hygiene, labeling, and chemical-safety requirements for food-contact and cooking paper products. Thailand is strengthening its regulatory framework for paper-based culinary materials against a backdrop of accelerating global commitments to ESG and sustainability, as such materials—particularly those derived from natural or recycled fibers—have emerged as key alternatives to plastics in food preparation, cooking, and packaging applications. As a result, regulators worldwide are tightening controls to ensure that sustainability initiatives do not compromise consumer safety, particularly regarding the potential migration of chemical substances into food. Regulatory Framework: Voluntary vs. Mandatory Standards Standards under the TIS regime are generally classified into two categories. Voluntary standards allow manufacturers or importers to apply for a product license and affix the TIS mark to demonstrate product quality and build consumer confidence, but compliance is not legally required. Mandatory standards, by contrast, require manufacturers and importers to obtain a product license and affix the TIS mark before placing products on the Thai market, and noncompliant products cannot be legally sold. Previously, the TIS standards for food contact paper (TIS 2948-2562) and cooking paper (TIS 3438-2022) fell under the voluntary standard regime, meaning that obtaining a TIS license and displaying the TIS mark was optional. However, due to the increasing use of paper in food preparation and cooking, the Thai Industrial Standards Institute has determined that upgrading these standards to mandatory status is necessary to enhance consumer safety. As a result, all paper intended for food contact or cooking purposes must now obtain a TIS product license prior to sale in Thailand. Scope of the Standards The primary distinction between the

Vietnam has progressively positioned blockchain as a strategic technology within its broader digital transformation agenda over the past decade. From early policy orientations to more recent legislative developments, the regulatory approach has gradually shifted from high-level recognition to more concrete legal integration. Against this backdrop, a new draft decree regulating activities relating to product and goods identification, authentication, and traceability (the “Draft Decree”) marks a notable turning point. Rather than merely referencing blockchain as a policy priority, the Draft Decree incorporates blockchain directly into a nationwide regulatory system, positioning it as part of the underlying infrastructure for data governance and public administration in relation to the management, verification, and traceability of product-related data. Evolution of Vietnam’s Blockchain Legal Framework: The Draft Decree in Context Vietnam’s blockchain legal framework has developed in several distinct phases. The first phase, beginning around 2019, was characterized by high-level policy recognition in several resolutions of the Party Central Committee. Particularly, blockchain was identified as part of the broader category of digital technologies critical to industrial modernization and participation in the Fourth Industrial Revolution. These resolutions did not regulate blockchain directly, but established its strategic importance at the national level. The second phase (2023 to 2025) saw the introduction of national strategies and technology policies that more explicitly recognized blockchain as a priority technology. Those policies collectively signaled a clear policy commitment to developing blockchain infrastructure and applications. However, these instruments remained largely at a policy-level and did not establish binding regulatory frameworks. The third phase (from 2025) involves the gradual integration of blockchain into sectoral legislation. Laws such as the Law on Digital Technology Industry (2025), the Law on Personal Data Protection (2025), and the Law on Science, Technology, and Innovation (2025) have introduced concepts such as digital assets, crypto assets, and even specific

A new decree in Vietnam brings significant implementation clarity to the country’s existing extended producer responsibility (EPR) legal framework. An EPR mechanism was first codified in Vietnam in the 2020 Law on Environmental Protection amid ongoing challenges surrounding the collection and treatment of product and packaging waste. The mechanism was progressively detailed through Decree No. 08/2022/ND‑CP and its successive amendments, but the regulatory framework remained insufficiently developed, notably in terms of support mechanisms for waste collection, recycling, and treatment. The newly launched regulations in Decree No. 110/2026/ND-CP (Decree 110), issued on April 1, 2026, and taking effect on May 25, 2026, stipulate fully and clearly the responsibility of manufacturers and importers to recycle products and packaging and to treat waste. Some key provisions of Decree 110 for manufacturers, importers, and related stakeholders are presented below. Subjects of EPR The Law on Environmental Protection assigns responsibility to manufacturers and importers for product and packaging recycling (under Article 54) or waste collection and treatment (under Article 55), depending on the type of products and packaging they produce or import. Decree 110 elaborates on these EPR provisions by specifying the responsible entities and listing out the types of products and packaging subject to recycling and waste treatment responsibilities. Decree 110 clarifies the responsible entities in special cases, such as when products under the same brand are made by multiple manufacturers, when there is a contract manufacturing or entrusted import relationship, and when the manufacturer or importer is part of a corporate group. Notably, exemptions may be applied in some scenarios, such as for manufacturers and importers of products and packaging exclusively for export, temporary import and re-export, or research and testing purposes, as well as for entities with annual revenue from related products not exceeding VND 30 billion. Recycling Responsibilities Decree 110

Thailand’s Personal Data Protection Committee (PDPC) has launched a public consultation period on a draft notification setting out criteria for data subject access requests (DSARs). The draft notification addresses practical uncertainties in handling DSARs by introducing standardized procedural requirements for data controllers. The consultation period runs from April 16 to May 15, 2026. The notification will enter into force 30 days from the date of its publication in the Government Gazette. Key Features of the Draft Notification The draft notification covers the following key areas: Scope of information subject to access. Data controllers must enable data subjects to access at least the following upon request: (1) personal data collected directly from them; (2) personal data obtained from other sources; and (3) the source of personal data obtained from other sources without consent. Information required under section 23 of the PDPA and information that must be recorded pursuant to section 39 of the PDPA—such as the categories of personal data collected and purposes of processing—must also be made available. Submission channels and formal requirements. Data controllers must provide at least in-person and postal channels for DSARs, while electronic or other channels are optional. Requests may be made either directly by the data subject or through an authorized representative, and must be signed and include sufficient identifying information, a preferred response method, and DSAR details. Identity verification documents (and proof of authority if the request is through a representative) are required, and additional documentation may be requested for verification or communication purposes. Data controllers may use different verification methods for DSARs submitted via electronic or other channels, provided this does not create undue obstacles to the exercise of data subject rights. Verification and response timelines. Data controllers must complete preliminary verification within seven business days of receiving a request. If a