On January 16, 2023, Thailand’s Securities and Exchange Commission (SEC) prescribed a set of security measures that digital asset business operators must implement if they provide custody of digital assets for their customers. The new security measures are prescribed in two notifications from the SEC and its office on digital asset wallet management systems and cryptographic key management systems, with the aim of safeguarding digital assets in custody against loss, fraud, and cybertheft. The notifications took immediate effect. The new security measures and the management systems are summarized below. Policy and guidelines for managing systems related to digital asset custody Digital asset business operators must have a written risk management policy for all systems relating to digital asset custody, approved by their board of directors and made accessible to all employees. The policy must be reviewed or revised at least once annually, or promptly if any potential risks are identified. Specific procedures must be implemented, such as establishment of a compliance team and internal controls. Management of systems for digital asset wallets and cryptographic keys Digital asset business operators must have policies and procedures for managing all systems relating to digital asset custody. This includes properly designing, developing, and managing digital asset wallets in a safe and secure manner. The same requirement on policies and procedures applies to cryptographic key management as well. Management of incidents that may affect systems related to digital asset custody Digital asset business operators must have measures in place to manage incidents that may impact systems related to digital asset custody. The measures include designating a person responsible for incident management, testing and reviewing the incident management policy annually, reporting any incidents affecting digital asset custody to the designated responsible person and the SEC immediately, and conducting a digital forensic investigation with an independent

Thailand’s Department of Business Development (DBD) has clarified that even after the amended Civil and Commercial Code (CCC) comes into effect on February 7, 2023, companies with articles of association pursuant to the previous CCC will still have to follow the previous requirements for publication of shareholders’ meeting notices. The amended CCC removes the requirement for companies to publish a notice in a local newspaper when calling a general meeting of shareholders. Instead, companies can call a general meeting of shareholders either by sending a notice by post with acknowledgement of receipt to every shareholder whose name appears in the register of shareholders or by delivering the notice in person. However, the amended CCC still requires companies that have issued share certificates to bearers to publish a notice at least once in a local newspaper or via electronic means, as prescribed by the relevant ministerial regulations. Notwithstanding these updated requirements, the DBD has issued a clarification explaining that the amended CCC coming into effect on February 7 will not usher in a blanket change to the way most companies are required to notify shareholders about a general shareholders’ meeting. If a company’s articles of association were made pursuant to a prior version of the CCC, that company will still need to publish a notice calling for a general meeting of shareholders in a local newspaper—even after the new amendment becomes effective. If companies would like to change their practice so that they no longer have to publish this notice, they will need to amend their articles of association after the effective date of the amended CCC. For more information on the new requirements of the amended CCC, or on any aspect of corporate laws and corporate governance in Thailand, please contact Prisna Sungwanna at [email protected], or Kobchai Nitungkorn at

On December 30, 2022, the Central Bank of Myanmar (CBM) updated its guidelines on the Thai baht to Myanmar kyat (THB-MMK) direct payment mechanism for Myanmar-Thailand border trade and other flows of capital. The CBM’s guidelines outline an expanded mechanism allowing more trade gates and more designated banks, stipulating banking arrangements for worker remittances, setting out a payment mechanism for exports, clarifying procedures for importing goods via the Myanmar-Thailand border trade, and instituting new reporting procedures. The THB-MMK mechanism came into being on March 3, 2022, as a pilot project for border trade in Myawaddy, Tachileik, and other areas approved by Myanmar’s Central Committee on Ensuring Smooth Flow of Trade and Goods. In this update, Myawaddy, Tachileik, Myeik, Kawthoung, Mawtaung, and other approved border trading zones are identified as open to the THB-MMK mechanism. During 2022, the following banks were approved to provide services for the THB-MMK direct payment mechanism: Approved March 4: Ayeyarwaddy Farmers Development Bank and Kasikornbank Public Company Limited Approved July 29: Myanmar Economic Bank and Bangkok Bank Public Company Limited (Yangon branch) Approved August 12: Kanbawza Bank (KBZ) and Bangkok Bank Public Company Limited (Yangon branch) Approved December 30: Ayeyarwady Bank and Bangkok Bank Public Company Limited (Yangon branch), CB Bank PCL and Bangkok Bank Public Company Limited (Yangon branch), UAB Bank and Krung Thai Public Company Limited, Myanmar Apex Bank and Siam Commercial Bank Myanmar Limited, Yoma Bank and Siam Commercial Bank Myanmar Limited Banking arrangements for workers’ remittances were also stipulated in the new update. In this regard, designated banks can process these remittances by partnering with CBM-permitted international currency transfer businesses, mobile banking service providers, and mobile money service providers after obtaining approval from the CBM. An addition to the direct payment mechanism is a requirement that exporters manage their received export

The Contract Committee of Thailand’s Consumer Protection Board has issued new requirements and prohibitions for consumer loan agreements. The Notification of the Contract Committee Re: Stipulation of Loan Business for Consumers as a Contract-Controlled Business B.E. 2565 (2022) was published in the Government Gazette on December 13, 2022, and will take effect after 90 days (i.e., on March 13, 2023). The notification repeals and replaces the Contract Committee’s previous notifications regarding the same subject matter, which were issued in 2001 (Nos. 1–2), 2002 (No. 3), and 2015 (No. 4). The notification enhances protection for consumers by extending the scope of application and stringently regulating the content of agreements for loans to individual consumers. Key Definitions The scope of the notification is largely indicated by its definitions of a few key terms: “Loan business for consumers” refers to a business in which the operator enters into an agreement to grant a loan to a consumer (i.e., not a juristic person) or to allow the consumer to borrow money from the business operator, whereby the consumer will spend money for a purpose other than their occupation or business to earn income. This includes granting loans to consumers through an electronic channel. The notification can also apply to personal loan businesses, digital loan businesses, and peer-to-peer lending businesses regulated by the Bank of Thailand. “Business operators” include financial institutions under the law relating to financial institutions; banks established under specific laws; individuals who carry out a loan business in their ordinary course of business; and juristic persons that engage in loan business, securitization business, or asset management of rights to monetary claim. Certain types of businesses and organizations—such as cooperatives—are excluded from the scope of this notification. “Interest” means legal interest in accordance with the Civil and Commercial Code, and it includes