Tilleke & Gibbins has contributed the Cambodia, Laos, Myanmar, Thailand, and Vietnam chapters to Infrastructure and Construction in Southeast Asia, a comparative guide developed by Drew Network Asia (DNA). The publication brings together insights from leading ASEAN law firms to address common legal and practical issues faced by participants in the construction and engineering sector across the region. Covering nine major Southeast Asian jurisdictions, the guide provides concise answers to frequently encountered questions relating to infrastructure and construction projects. Topics addressed include the regulatory environment, procurement practices, project structuring, risk allocation, contracting terms, dispute resolution mechanisms, and the enforcement of arbitral awards. Each jurisdictional chapter follows a consistent question-and-answer format, enabling readers to compare legal approaches and market practices across countries. This structure highlights both areas of convergence and key differences between jurisdictions, supporting more informed decision-making in cross-border projects and investments. While the guide offers a practical regional overview, it also underscores that legal frameworks and market practices vary significantly between jurisdictions and may be shaped by local principles and industry norms. Readers seeking jurisdiction-specific advice are encouraged to contact the practitioners listed at the end of each chapter. The full guide is available for download through the button below or directly from the DNA website.

On December 10, 2025, the National Assembly of Vietnam officially passed the amended Law on Construction, marking the culmination of a multiyear reform process aimed at modernizing Vietnam’s construction legal framework, streamlining administrative procedures, and aligning with digital transformation and sustainability goals. The amended law, which replaces the current Law on Construction No. 50/2014/QH13, will take effect on July 1, 2026. The Ministry of Construction (MOC) is also preparing several guiding decrees covering project classification, digital submissions and database management, and technical standards for design documentation. Key Changes in the Amended Law While the executed version of the amended Law on Construction has yet to be released to the public, reports have confirmed that it includes the following key changes introduced under the latest draft submitted by the MOC in September: Project classification: The amended Law on Construction classifies construction projects by investment form (public, PPP, business investment, and others), which aligns with the Law on Public Investment, the Law on Investment, and the Law on PPP Investment. This reduces regulatory overlap and clarifies responsibilities. Project preparation and appraisal: The requirement for prefeasibility reports for business investment projects is abolished, as this requirement is now governed by the Law on Investment and the Law on Public Investment. This change shortens the preparation timeline and reduces duplication of procedures. In addition, the authority’s appraisal is streamlined to a single feasibility stage. Also eliminated is the appraisal process conducted following basic design approval, shifting more responsibility to investors and consultants, with targeted post-audit mechanisms for high-risk projects. Construction permits: One of the most significant new changes of the amended Law on Construction is the expansion of exemptions from construction permit requirements to the following eight distinct groups of construction works: State-secret works, emergency or urgent constructions, works under special public investment

Tilleke & Gibbins has updated the Cambodia, Myanmar, Thailand, and Vietnam chapters in Multilaw’s Global Data Protection Guide, which collects expert advice from Multilaw member firms in 90 jurisdictions around the world (including a Laos chapter, which is also authored by Tilleke & Gibbins). The guide provides answers to key issues concerning the fast-developing data protection and privacy laws around the world, and helps data protection officers and in-house counsel understand how the regulatory regime for data protection can affect their organizations in various jurisdictions. Each section of the guide identifies the main laws that govern data protection in that jurisdiction, and gives a detailed overview of the legal principles in place as well as the enforcement authorities responsible for overseeing compliance. The guide also covers issues related to data subject rights, data protection officers, impact assessments, data breach notification requirements, and cross border data transfers. The use of personal data in marketing is also considered, with specific information on electronic marketing rules, cookies, and marketing to businesses and consumers. Multilaw, of which Tilleke & Gibbins is a longtime member, is a global network of carefully selected independent law firms able to provide expert legal advice in complex environments around the globe. The full guide is available for free on the Multilaw website.

On December 10, 2025, the National Assembly of Vietnam passed a new Cybersecurity Law, which will take effect on July 1, 2026. The new Cybersecurity Law was developed based on the consolidation of the 2018 Cybersecurity Law and the 2015 Law on Network Information Security. While the final approved version of the new Cybersecurity Law has not yet been published, according to official reports, the following notable requirements are confirmed to be included: The new Cybersecurity Law dedicates a specific article to prohibited acts related to cybersecurity, under which it strictly prohibits posting or disseminating information online that propagandizes against the Socialist Republic of Vietnam. The law also prohibits, among other things, (i) the appropriation, trading, seizure, or intentional disclosure of information classified as state secrets, work secrets, business secrets, personal secrets, family secrets, and private life; (ii) intentionally eavesdropping, recording, or filming online conversations without authorization; and (iii) the use of artificial intelligence (AI) or new technologies to conduct prohibited acts. The Ministry of Public Security (MPS) has the authority to require enterprises providing telecommunications, internet, and online services, as well as system administrators, to remove information violating cybersecurity laws from systems under their management. The MPS is also assigned responsibility for ensuring information security in cyberspace and data security, establishing mechanisms for IP address identity management, verifying digital account registration information, and issuing warnings and sharing information on cybersecurity threats. Information systems are classified into five levels (similar to the 2015 Law on Network Information Security) based on the degree of harm to national security and social order if an incident occurs. The MPS is the lead agency assisting the government in state management of cybersecurity. The Ministry of National Defense is responsible for managing military information systems, and the Government Cipher Committee manages cryptographic and cipher