M&A specialists at Tilleke & Gibbins have contributed the Vietnam chapter to Private M&A 2025, a newly released guide from Lexology Panoramic. The publication provides practical insights into private mergers and acquisitions frameworks in jurisdictions worldwide. The Vietnam chapter addresses key aspects of private M&A transactions, including: Structure and process, legal regulation, and required consents Advisers, negotiation, and documentation Due diligence and disclosure obligations Pricing, consideration, and financing Conditions, preclosing covenants, and termination rights Representations, warranties, indemnities, and postclosing covenants Taxation of transfers Employees, pensions, and benefits Recent legal, regulatory, and market practice developments The chapter highlights how Vietnam’s legal framework governs private acquisitions and disposals, outlines typical transaction processes and structures, and provides guidance on common regulatory and practical considerations. It also notes recent trends, including increased scrutiny of merger control filings by the Vietnam Competition Commission and regulatory changes affecting M&A approvals. The full Vietnam chapter is available as a PDF through the button below. Readers can also gain 30 days of complimentary access to Private M&A 2025 and Lexology Panoramic’s full library of resources through this link.

On September 10, 2025, Vietnam’s National Credit Information Center (CIC) reported to the Vietnam Cybersecurity Emergency Response Team (VNCERT) a suspected significant cybersecurity incident involving unauthorized access to the CIC’s credit information database. A hacker group has claimed responsibility and allegedly posted over 160 million records for sale, including sensitive personal and financial data. Implications for Banks and Financial Institutions Companies that share customers’ or potential customers’ personal data with the CIC for credit scoring or other purposes—and continue to act as a data controller for such data—may be obligated under Vietnam’s Personal Data Protection Decree (PDPD) and related regulations to: Notify A05 (Department of Cybersecurity and High-Tech Crime Prevention) and the State Bank of Vietnam without delay. Inform affected individuals if their personal data is at risk. Recommended Actions Companies that could be impacted by this data breach should take the following actions: Conduct an internal review of CIC-related data in their systems, and identify whether and how the systems have been affected by this incident. Assess whether to notify regulators and customers/potential customers. Enhance cybersecurity controls, monitor for suspicious activity, and implement additional safeguards to prevent secondary breaches.

Under Thai law, authorized directors stand as a company’s mind and will and, as such, may incur personal criminal liability for acts or omissions committed in the course of company business. When allegations surface, directors must be prepared for the practical reality that, before guilt or innocence is ever adjudicated, they could be deprived of liberty unless bail release is promptly achieved through the competent legal authority. When Bail Can Be Granted Two procedural moments trigger the need to consider bail. The first arises during the investigative phase, when a claim is lodged against a director with the competent law enforcement authorities. Upon receipt of a complaint, the assigned inquiry officer summons the director for questioning, compiles evidence, and ultimately forwards a prosecution or nonprosecution recommendation to the public prosecutor. Although the public prosecutor retains ultimate discretion to indict an accused director, the police or prosecutor may conclude that pretrial detention is necessary and may therefore apply to the court for an order to hold the director in court custody. The second moment occurs after a criminal case is filed directly with the court. This occurs once a court accepts a criminal case filed by a prosecutor against a director or, alternatively, when the court accepts a case filed by an individual for trial. For cases filed by individuals, the plaintiff presents prima facie evidence at the preliminary hearing, and the court will accept the complaint if it finds sufficient grounds, thereby conferring upon the director the status of a criminal defendant. Upon acceptance of the criminal case, the court then has the inherent authority to order custody pending trial unless the defendant secures bail release. Procedural Considerations Experienced litigants typically prepare bail security in advance and submit a bail petition at the earliest possible time. While there are

On September 1, 2025, Myanmar’s Directorate of Investment and Company Administration (DICA) issued Directive No. 106/2025 to remind all companies and organizations registered under the Myanmar Companies Law of their obligation to strictly comply with the DICA registrar’s orders, directives, and procedures. This directive highlights the importance of legal and procedural compliance in corporate filings, governance changes, and operational conduct. It also signals increased scrutiny over documentation submitted during annual returns, share transfers, and director appointments or resignations. Public companies will be subject to closer regulatory attention, and new company registrations will involve vetting of proposed directors to ensure prior compliance with applicable laws. Compliance The directive emphasizes the following points: Companies must ensure full compliance with the Myanmar Companies Law and all directives issued by the registrar. This includes the proper submission of annual returns and adherence to updated requirements for share transfers and changes in directors. Companies and organizations must comply with all applicable laws, rules, directives, and procedures issued by relevant ministries and departments. If any authority takes action due to noncompliance, the registrar may also take appropriate measures. Noncompliance may result in regulatory sanctions, including restrictions on future company participation and vetting under anti–money laundering and counter–terrorism financing protocols. Prospective directors of newly registered companies will be vetted to confirm no prior violations of applicable laws. Entities must respond promptly and accurately to document requests from the registrar, both during initial registration and in subsequent filings. Companies are strongly advised to review their internal compliance frameworks and ensure readiness to meet DICA’s documentation and procedural expectations. In particular, companies must respond promptly and accurately to document requests from the registrar, whether during initial registration or in subsequent filings. For more information on this DICA announcement, or on any aspect of corporate registration, or assistance with