The Vietnamese government has demonstrated a strong commitment to building a digital government, digital economy, and digital society through its recently issued national strategy on digital infrastructure. Under Decision No. 1132/QD-TTg dated October 19, 2024, on “Digital Infrastructure Strategy to 2025 with Orientation to 2030,” the government will create supportive conditions for both domestic and international businesses to invest in digital infrastructure with cybersecurity as a priority. Recognized as vital to the economy, this digital infrastructure will consist of four main components: (i) telecommunications and internet infrastructure, (ii) data infrastructure, (iii) physical-digital infrastructure, and (iv) digital utility infrastructure, including digital technology as a service. Key goals for 2025 include universal fiber optic access for households, 100% 5G coverage across all provinces and cities, deployment of at least two new international undersea fiber optic cables, establishment of AI data centers, development of green-standard data centers, and platforms for IoT, AI, big data, blockchain, and cybersecurity. By 2030, goals include fiber access with speeds of at least 1 Gbps, 5G coverage for 99% of the population, readiness for 6G trials, six additional international undersea fiber optic cables, development of a hyperscale data center, and positioning Vietnam as a digital hub. To achieve these goals, the government has outlined some core tasks, creating significant opportunities for both foreign and domestic investors: Developing telecommunications and internet infrastructure for widespread fiber optic and 5G access, while preparing for emerging technologies like 6G, Open RAN, satellite, and IpV6. Telecommunication enterprises will jointly invest in and share the use of international fiber optic cable routes to ensure efficient capacity utilization and optimize investment capital. Attracting foreign and domestic investment to establish hyperscale data centers and cloud computing services that meet global standards. Creating physical-digital infrastructure by integrating technology across key sectors such as transportation, energy, healthcare,

On October 31, 2024, Thailand’s Office of the Personal Data Protection Committee (PDPC) opened a public consultation period on its draft notifications—one directed at data controllers and another at data processors—regarding exemptions from the requirement to create and maintain records of processing activities (ROPAs) under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). The draft notification for data controllers aims to amend and revoke certain aspects of the first ROPA exemption notification issued in June 2022 and outlines the criteria for data controllers to be exempted from the obligation to prepare and maintain such records. Although it is officially titled “Notification of the Personal Data Protection Committee on Exemption from Record-Keeping Requirements for Small Business Data Controllers,” this draft notification applies to all types of exempted data controllers (see list below), and not only small businesses. The draft notification for data processors is new and does not replace any prior notification. The criteria under both draft notifications exempt certain data controllers and data processors from the obligation to maintain ROPAs, but exempted data controllers are not free from the obligation to retain information on the rejection of data subjects’ requests to exercise certain rights under the PDPA. While these criteria remain consistent with the June 2022 ROPA exemption notification, there are a few key takeaways from the notifications, as detailed below. Types of Exempted Parties The draft notification on data controllers adds condominium and housing estate juristic persons, as well as individuals, to the list of parties eligible for an exemption, while removing internet cafes from the list. The new draft notification for data processors mirrors the corresponding list in the draft notification for data controllers. The complete list of parties eligible for ROPA exemptions under the draft notifications is as follows: SMEs according to the law on

Crowdfunding has emerged as a promising option for raising capital, particularly for startups and small businesses. In Thailand, investment-based crowdfunding falls primarily under the regulatory purview of the Securities and Exchange Commission (SEC). The SEC is responsible for licensing and overseeing crowdfunding portals, ensuring compliance with regulatory requirements while ensuring investor protection and market integrity. The crowdfunding regulations in Thailand allow non-publicly traded companies to raise funds by offering equity and debentures for sale through SEC-licensed crowdfunding portals. This framework opens new possibilities for businesses seeking alternative funding sources and for investors looking for new opportunities.  Crowdfunding Portals Under Thai regulations, “crowdfunding portals” are defined as websites, mobile phone applications, or other similar electronic media developed for offering securities for sale. To operate a crowdfunding portal in Thailand, applicants must meet several key requirements: Incorporation: The applicant must be incorporated in Thailand. This requirement ensures that the portal operator has a significant local presence and is subject to Thai law. Minimum capital: A minimum paid-up registered capital of THB 5 million is required. This capital requirement helps ensure that portal operators have sufficient financial resources to maintain their operations. Operational readiness: The applicant must have crowdfunding portal systems ready for use upon applying to the SEC for approval to operate. This requirement demonstrates the applicant’s technical capability and readiness to provide crowdfunding services. These requirements are designed to ensure that crowdfunding portal operators are well-capitalized, technologically prepared, and committed to operating within the Thai market. Business and Investment Implications The regulatory framework for crowdfunding in Thailand offers non-publicly traded companies with an additional avenue for raising funds, as licensed crowdfunding portals provide a structured and regulated environment for fundraising. However, companies must ensure compliance with SEC regulations when offering securities through these platforms. For investors, crowdfunding offers new investment

One key component of Thailand’s support for the development of fintech innovations is its sandbox framework, supervised by the Bank of Thailand (BOT). This framework supports business operators in experimenting with new technologies under controlled conditions. This article explores the structure and significance of the BOT’s sandbox program in driving fintech innovation in Thailand. The BOT Sandbox Framework In June 2024, the BOT updated its sandbox framework to provide a more comprehensive and flexible environment for testing fintech innovations. The framework allows participants to experiment with their ideas in a controlled and limited environment, balancing the need for innovation with the imperative of maintaining financial stability and consumer protection. Three Types of Sandboxes The BOT’s framework encompasses three distinct types of sandboxes: the Regulatory Sandbox, the Own Sandbox, and the Enhanced Regulatory Sandbox. Regulatory Sandbox The Regulatory Sandbox is a mandatory testing ground for certain BOT-licensed financial services to ensure that potentially impactful innovations are tested and evaluated before wide-scale implementation. Participation in this sandbox is a prerequisite for: License applications for specific financial services. Implementation of new technologies or innovations in existing licensed services. Financial services that have the potential to become a structural element or standard of the Thai financial sector. A prime example of a service requiring participation in the Regulatory Sandbox is the Thai QR code payment via PromptPay system, which involved various banks several years ago until the Bank of Thailand granted permission for these services to be provided to the general public. Own Sandbox The Own Sandbox is an optional program that the BOT encourages for financial service providers and fintech operators implementing new technologies. This sandbox provides a more flexible environment for testing innovations that may not require the same level of regulatory scrutiny as those in the Regulatory Sandbox. Enhanced Regulatory