In today’s digital age, cyberattacks have become a real threat to organizations worldwide. These attacks can range from phishing and malware to ransomware and distributed denial of service (DDoS) attacks. As the frequency and sophistication of these attacks increase, so does the importance of cybersecurity compliance. In the corporate world, compliance refers to the process of ensuring that a company and its employees adhere to all relevant laws, regulations, standards, and ethical practices—but it should not stop there. Compliance should also encompass asset recovery and disciplinary measures, which can both help organizations address incidents effectively and promote good governance. Cyberattacks are malicious attempts to access or damage a computer system or network, often carried out for financial gain, for political activism, or simply to cause disruption. For instance, a successful attack might involve an attacker creating an email address that closely resembles a legitimate one, perhaps by changing only one or two characters. That email address is then inserted into an existing conversation thread, making it appear as if the user with this email address was already part of the discussion. This tactic can easily deceive a recipient into believing the email was sent from a trusted source, thereby leading them to click on malicious links, provide sensitive information, or even make payments in accordance with the attacker’s request or instructions. Phishing attacks like these are particularly dangerous and can have a serious impact on the ongoing business of a corporation because they exploit the trust and familiarity established in the original email chain. Effective Mitigation Approaches Mechanisms for addressing the aftermath of a crisis provide important recourse to affected organizations, but effective compliance mechanisms can minimize the risk of such crises ever occurring. Companies should therefore prioritize preventative measures and implementation of effective crisis management schemes. Various legal

Thailand’s tax dispute resolution framework has undergone a significant transformation with the enactment of the Act Establishing the Tax Court and the Procedure for Tax Cases (No. 3) B.E. 2568. Published in the Government Gazette on May 27, 2025, the amended act will come into force on November 24, 2025, which is 180 days after its publication. The amended act marks a pivotal shift in the jurisdiction and procedures of the Tax Court, most notably by empowering it to adjudicate certain criminal tax cases for the first time. Background and Rationale The Tax Court was originally established in 1985 as a specialized forum to handle complex tax disputes, including those related to revenue, customs, and excise taxes. The creation of the Tax Court recognized the need for judicial expertise in tax law, given its technical and specialized nature. The latest amendment is designed to address procedural inefficiencies, modernize court processes, and align Thailand’s tax litigation system with international standards. The reform demonstrates Thailand’s commitment to enhancing the efficiency, transparency, and fairness of its tax dispute resolution mechanisms. Key Amendments and Provisions Six of the key changes in the amendment are highlighted below. Expansion of jurisdiction to criminal tax cases. The most significant change is the extension of the Tax Court’s jurisdiction to include criminal offenses under the Revenue Code, customs law, excise tax law, and other tax-related laws that may be specified by royal decree. New sections in the act explicitly grant the Tax Court authority to hear and decide criminal tax cases, so individuals and entities accused of criminal tax evasion or other tax-related crimes will now have their cases heard by judges with specialized tax expertise. The law also clarifies the Tax Court’s jurisdiction when a single act constitutes multiple offenses (some tax-related, some not) or when

The growth of Vietnam’s vibrant digital economy offers tremendous potential but is also a driver of the persistent problem of online intellectual property (IP) infringement. The spectrum of issues faced by IP rights holders runs from copyright piracy on digital services (such as streaming and torrent sites) to the sale of counterfeit goods via e-commerce sites and social platforms to the misuse of rights through misleading use of trademarks. These infringements do not only eat into profits; they damage brand reputation and mislead consumers. As a result, site blocking and keyword blocking have become increasingly important components of the enforcement toolkit available in Vietnam. Legal Framework for Blocking Actions Site and keyword blocking in Vietnam is supported by a growing legal framework, particularly following the 2022 amendment to the IP Law. Prior to this, the legal basis for blocking was scattered across various laws, and internet service providers (ISPs) were only obligated to block access to infringing content upon official requests from authorities. The introduction of Article 198b under the amended IP Law marked a significant shift, establishing a clearer mechanism for rights holders to request site blocking directly. This provision obliges them to act upon valid takedown or blocking requests. In addition to the IP Law, other key legislation includes the Law on Information Technology, the Law on Cybersecurity, the Law on Advertising, and various decrees. Together, these laws provide a more structured and enforceable basis for blocking actions in Vietnam, though practical enforcement still depends on ISP cooperation and the clarity of the infringement evidence. Competent Authorities Previously, rights holders could pursue administrative actions through specialized inspectorates under the Ministry of Science and Technology, the Ministry of Culture, Sports and Tourism, or the Vietnam E-Commerce and Digital Economy Agency (iDEA). However, due to a recent government restructuring,

Tilleke & Gibbins attorneys in Vietnam have contributed the 2025 edition of Doing Business in Vietnam, a comprehensive Q&A-style resource from Thomson Reuters Practical Law that provides essential insights for companies navigating business operations in Vietnam. The guide presents a detailed overview of the country’s legal framework and regulatory environment, reflecting recent updates in Vietnamese legislation and practice. This annually updated guide offers key information on the following areas: Legal system: Structure of the Vietnamese judiciary and the role of codified law. Foreign investment: Conditions for market access, licensing requirements, foreign ownership restrictions, and investment incentives. Business vehicles: Formation and operation of legal entities, including limited liability companies, joint-stock companies, and representative offices. Employment: Employment contracts, social insurance, labor rights, and procedures for hiring foreign nationals. Tax: Overview of corporate income tax, personal income tax, value-added tax, and other tax obligations. Intellectual property: Procedures for protecting and enforcing patents, trademarks, copyrights, and other IP rights. Data protection: Compliance requirements under Vietnam’s data privacy laws, including the Personal Data Protection Decree. Competition law: Antitrust rules and regulatory oversight under the Law on Competition. Anti-bribery and corruption: Legal framework and enforcement practices aimed at curbing corrupt activities. E-commerce and digital business: Regulations governing online platforms, digital content, and cross-border services. Marketing and advertising: Laws and guidelines on advertising standards and consumer protection. Product regulation and liability: Safety requirements, product liability issues, and roles of relevant authorities. Doing Business in Vietnam is part of Practical Law’s global series of legal guides designed to support international practitioners and businesses. To access the most recent edition of the Vietnam guide, visit the Practical Law website and sign up for a free trial.