Parallel imports—branded goods imported into a domestic market and sold there without the consent of the intellectual property (IP) owner—pose a unique challenge for IP owners. In contrast to counterfeit goods, parallel imported goods are manufactured by or under the license of the IP owner and formulated or packaged for a particular jurisdiction and then imported into a different jurisdiction without the authorization of the IP owner. Intellectual property laws and perspectives on parallel import vary throughout Southeast Asia. The distinct legal landscape in each nation should be carefully navigated in consultation with legal experts to ensure brand protection to the fullest degree. This guide provides insight into the legal frameworks relating to parallel imports in Cambodia, Indonesia, Laos, Myanmar, Thailand, and Vietnam. Each section examines the relevant laws and regulations that pertain to parallel imports and explores the remedies available to IP owners in each country. Finally, the guide presents some strategies to combat parallel importation and maximize IP protection in Southeast Asia. The full guide can be downloaded through the button below.   This guide was prepared with the assistance of Tilleke & Gibbins interns Christian Pederson and Keoni Williams.

Michael Ramirez, a counsel in Tilleke & Gibbins’ dispute resolution group in Bangkok, has updated the firm’s contribution to the Global Attorney-Client Privilege Guide, published by Lex Mundi. The newly expanded guide provides information on what constitutes attorney-client privilege in over 70 countries around the world. The Thailand section of the guide contains in-depth information on the function and applications of attorney-client privilege in Thailand (or, as explained in the guide, an equivalent concept enshrined in Thai law), including coverage of the following topics: Privilege in corporations Common interest doctrine Litigation funding Crime-fraud exception Work product doctrine/litigation privilege Other privileges including mediation, accountant-client and settlement negotiation The interactive guide features expert contributions by Lex Mundi member firms from jurisdictions worldwide. Readers can browse the contributions, generate country-specific reports, and compare attorney-client privilege in multiple jurisdictions. For more information, please visit the Lex Mundi website.

On September 9, 2021, Laos announced a new pilot program to allow the mining and trading of cryptocurrency. Notification No. 1158, issued by the Prime Minister’s Office, provides for an electricity sale-purchase agreement with six companies involved in the pilot program. Under the notification, the six companies authorized by the prime minister to mine and trade cryptocurrency in Laos will pay a capped fee for energy they use in data processing or mining cryptocurrency. This effectively establishes a sandbox in which these six companies may mine and trade cryptocurrency—including on international cryptocurrency exchanges. The Ministry of Technology and Communications (MTC) is in charge of coordinating the program, together with the Ministry of Finance, the Bank of the Lao PDR, the Ministry of Planning and Investment, the Ministry of Energy and Mines, the Ministry of Public Security, and Électricité du Laos. The MTC is also charged with drafting the rules of the pilot program and setting the conditions on which the participating companies can mine, sell, and purchase cryptocurrency in Laos. One of the six selected companies will also act as a coordinator for the other companies and report to the government on any benefits of cryptocurrency observed during the pilot program. The next step is for the MTC to compile data analysis from each of the other government agencies and submit the conclusions to a meeting of the prime minister and the deputy prime ministers before the pilot program is implemented. The pilot program was originally scheduled to start in September, but there has not yet been any update on the implementation of the program, which nonetheless is expected to start in the near future.

In September 2021, the Bank of Thailand (BOT) issued its Guidelines on Data Governance to provide financial institutions with recommendations on how to ensure that their data governance will be in compliance with accepted international principles. While there are no penalties for noncompliance, financial institutions should view the recommendations as minimum standard expectations for their data governance in Thailand. The BOT guidelines set forth five main data governance principles: Data Governance Policy Financial institutions should set forth their data governance policy in writing in accordance with their business size, business operations, business complexity, and data risk. The policy should cover all types of data, including data related to services from third parties or business partners, as well as provide information on the data governance structure, data lifecycle management, protection of data security and data privacy, and incident management. Financial institutions should inform their employees and other relevant parties of the policy to ensure their compliance. In addition, the data governance policy must be approved by the designated board or committee of the financial institution, and be reviewed and revised in response to significant changes. Data Governance Structure Financial institutions should establish a data governance structure with three lines of defense, supervised by an oversight committee. The first line of defense comprises data management personnel, a data approver, and data users; the second comprises a risk management unit and a compliance unit; and the third is an audit unit. While the chosen data governance structure can be tailored to the characteristics of the institution, the structure should cover all of these roles and duties, and must not contravene the principle of checks and balances. The data governance structure should also be supported by sufficient personnel and equipment, as well as a clear plan—reviewed and revised as necessary—for building awareness at all levels of the financial institution and among third parties. Data Lifecycle Management A diagram or other record covering all data pathways within an organization should show every step in the data lifecycle, including creation or acquisition, use or disclosure, retention, and deletion or destruction. Metadata management standards and rules should also be set and updated as necessary. Finally, additional standards and rules should ensure the quality, reliability, and usability of data. Protection of Data Security and Data Privacy Data security measures should cover the sending and receiving of data via communication networks, retention or use of data on the working systems and recording materials, and deletion of data—including data related to third-party service providers or other links to third parties. The BOT guidelines direct financial institutions to develop security measures in accordance with the BOT’s 2019 notification on information technology risk and other relevant guidelines, as may be amended from time to time. As for data privacy, financial institutions are to comply with the Personal Data Protection Act B.E. 2562 (2019). In addition, financial institutions are to follow market conduct prescribed by the BOT in managing and administering customer data. Incident Management With a focus on preventing incidents that might cause damage, the guidelines advise financial institutions to implement processes for monitoring and managing data incidents. These processes should cover areas such as readiness for a data breach, identification of a data issue, analysis of the cause, evidence gathering, and so on. If an incident affects business continuity, financial institutions may follow their own business continuity plan. While the BOT guidelines are directed toward financial institutions, business operators in other industries may also adopt the guidelines for their data governance. For more information on these guidelines, or on any aspect of data protection or financial services provision in Thailand, please contact Tilleke & Gibbins at [email protected]