Successor decrees under Cybersecurity Law 116/2025
What changes for on-premises security products, and what the Decree 53 transition means in practice.
Watch-list item 1 · Unpublished · No author or review date assigned
Resources
Dated regional intelligence, without filler
Briefing topics come from the jurisdiction watch list. Draft topics remain visibly unpublished until a responsible owner verifies sources, analysis, and review date.
Orientation only—not legal advice. A draft title is not a published authority.
The implementing PP under UU PDP is still pending
Why the criminal provisions and the 3×24-hour clock already bind you regardless.
Watch-list item 2 · Unpublished · No author or review date assigned
Six hours is not seventy-two
Act 854 NCII reporting against PDPA notification — two clocks, two populations, one incident.
Watch-list item 5 · Unpublished · No author or review date assigned
What the amended Cybersecurity Act changed on 31 October 2025
CII obligations, and where the GenAI channel sits relative to existing whole-of-government controls.
Watch-list item 3 · Unpublished · No author or review date assigned
BOT AI Risk Guidelines 2025 and third-party AI
A GenAI DLP sold to a Thai bank is itself an assessed AI system. What the evaluation kit is for.
Watch-list item 4 · Unpublished · No author or review date assigned
Need a current jurisdiction discussion?
Start from the dated jurisdiction record and confirm current primary sources with qualified counsel.