Tilleke & Gibbins has contributed the Cambodia, Myanmar, Thailand, and Vietnam chapters to Data Protection and Cybersecurity Regulation in Southeast Asia, a wide-ranging guide published by Drew Network Asia (DNA). The resource provides a comprehensive overview of data protection and cybersecurity laws across the region, offering practical insight into compliance requirements and regulatory developments affecting organizations that handle personal data or operate digital services in Southeast Asia. The guide begins with a regional overview, including the broader ASEAN context and cooperation initiatives. Jurisdiction-specific chapters follow a consistent structure—covering data privacy and governance obligations, security requirements and breach notification, outsourcing and cross-border data transfers, and broader accountability and compliance measures. This format allows readers to compare regulatory approaches across markets such as Brunei, Indonesia, Malaysia, the Philippines, Singapore, and others. In addition to the country chapters, the publication addresses cybersecurity and privacy engineering challenges, providing guidance for organizations and outlining obligations applicable to data controllers, processors, and intermediaries. A dedicated section on data breach management across ASEAN examines notification requirements, response considerations, and practical steps for managing incidents in a regional or global context. The guide is intended to serve as a practical reference, and the authors note that specific legal requirements may vary depending on sector, processing activity, or evolving legislation. Readers seeking more detailed advice can contact the practitioners listed in each chapter. The full guide is available for download using the button below or directly from the DNA website.

The General Department of Customs and Excise (GDCE) in Cambodia’s Ministry of Economy and Finance launched a trial phase of its Intellectual Property Rights Recordation System (IPRRS) on September 1, 2024. The system compiles necessary information and documents related to intellectual property rights in the country, enabling customs authorities to swiftly access these documents and enhance their ability to identify and intercept potential parallel imports and infringing goods at the border. This will also better facilitate ex-officio actions by customs authorities. The system is currently referred to as being in a “trial phase” to support further amendments or updates to address any potential technical errors that may arise from public use. However, the IPRRS is already fully operational. Types of Recordation Currently, the IPRRS allows two types of recordation: Intellectual property recordation is available for trademarks, geographical indications, copyrights, and related rights that are protected in Cambodia. It allows IP owners, authorized representatives, and legal representatives to record information and documents relating to such rights, including information on possible or potential counterfeit goods, with the GDCE. Recordation will give customs authorities quicker access to the information and enable them to promptly take action against potential counterfeit or infringing goods. Exclusive distributorship recordation is meant to streamline the process that takes place after the Ministry of Commerce issues a notice of the recordation of exclusive rights. Under the current practice, after receiving a copy of a notice of the recordal of an exclusive distributorship issued by the Ministry of Commerce (MOC), the GDCE needs to enter the information into their system manually to enable them to promptly identify or stop potential parallel importation at the border. This reportedly causes delays in border officers’ access to the necessary information. Recordation through the IPRRS, on the other hand, allows local exclusive distributors

The popularity of the franchise business model has been growing rapidly in Southeast Asia in recent years, with some of the world’s top brands becoming common sights in the commercial districts and shopping malls of major regional cities in Cambodia, Indonesia, Laos, Myanmar, Thailand, and Vietnam. While for most countries in this part of the world, franchising has not been explicitly mentioned in legislation, well prepared franchise business operations can comfortably adapt to each country’s regulatory framework, and the growth is poised to continue even as the global retail sector redesigns and redoubles its efforts in the wake of the COVID-19 outbreak. In fact, the franchise business model, which is both global and hyper-local at once, is one of the most promising solutions that entrepreneurs are turning to in their quest to overcome the challenges of the new economic reality. The Regional Guide to Franchising Law in Southeast Asia provides key, up-to-date insights into the legal frameworks regulating franchise operations in these Southeast Asian countries, and helps brand owners understand the most relevant laws, authorities, and procedures for their business. Some of the essential topics covered for each jurisdiction include considerations in negotiating and designing franchise agreements, protecting intellectual property rights, and important information on judicial and arbitral procedures should a dispute arise between franchisor and franchisee. Practitioners from Tilleke & Gibbins’ offices in Cambodia, Indonesia, Laos, Myanmar, Thailand, and Vietnam contributed to guide—not only by providing legal expertise on the laws and mechanisms applicable in each jurisdiction, but also by examining strategies for establishing and running resilient franchise operations in Southeast Asia. The full guide can be accessed as a PDF through the button below.

Tilleke & Gibbins has contributed the Cambodia, Myanmar, Thailand, and Vietnam chapters to How the Use of Artificial Intelligence Is Regulated in Southeast Asia, a comparative resource published by Drew Network Asia (DNA). The guide provides an accessible introduction to artificial intelligence (AI) and examines how ASEAN member states are approaching governance, regulation, and responsible deployment of AI technologies. The publication begins by outlining core AI concepts and summarizing the ASEAN Guide on AI Governance and Ethics, which reflects the region’s collective approach to promoting innovation while addressing risks. It then presents a comparative overview of nine ASEAN jurisdictions, highlighting emerging national strategies, regulatory developments, and institutional frameworks. Each country chapter responds to a consistent set of ten practical questions. These cover whether a national AI strategy has been issued; the extent to which dedicated AI laws or sectoral regulations apply; the existence of relevant judicial decisions; available guidelines and government support schemes; regulators responsible for AI oversight; approaches to liability, copyright, and data protection; and key considerations for organizations deploying AI technologies. By consolidating developments across the region, the guide serves as a useful reference for businesses exploring AI-related opportunities or compliance obligations in Southeast Asia. As regulatory approaches continue to evolve, readers seeking jurisdiction-specific advice are encouraged to contact the practitioners listed in each chapter. The full guide is available for download using the button below or directly from the DNA website.