- ESCI and FDI commencement dates
- MAS AI Risk Guidelines — final text
Regulatory intelligence
Dated regional intelligence, not legal advice
Material for five jurisdictions is mapped to primary sources already in the record, with fact, interpretation, watch items, and product mapping kept distinct.
Record review date: 27 August 2026. Regulatory and legal approval remains required before publication.
SI No product licence prerequisite recorded
Singapore
A mature regime with an existing whole-of-government DLP deployment. The GenAI channel is the gap it does not cover.
MA No product licence prerequisite recorded
Malaysia Malaysia
A dual-track market. The PDPA does not bind government, so the public sector and the enterprise sector are governed by different instruments — and sold to differently.
IN Market prerequisites recorded
Indonesia Indonesia
The law is in force and its criminal provisions and breach clock are live, but the implementing regulation and supervisory authority remain pending. We position for readiness, not for a settled regime.
VI Market prerequisites recorded
Vietnam Việt Nam
The most recently rewritten regime in the market set, and the one with a hard vendor-side prerequisite before anything can be sold.
TH No product licence prerequisite recorded
Thailand ประเทศไทย
A Thai-language console is a de facto tender requirement, and the central bank now assesses a GenAI DLP as a third-party AI system in its own right.
- Singapore No prerequisite recorded
- Malaysia No prerequisite recorded
- Indonesia Prerequisite recorded
- Vietnam Prerequisite recorded
- Thailand No prerequisite recorded
| Jurisdiction | Market prerequisite | Sourced facts | Watch items |
|---|---|---|---|
| Singapore | No product licence prerequisite recorded | 4 | 2 |
| Malaysia | No product licence prerequisite recorded | 4 | 1 |
| Indonesia | Prerequisites recorded | 5 | 3 |
| Vietnam | Prerequisites recorded | 4 | 2 |
| Thailand | No product licence prerequisite recorded | 4 | 2 |
Watch register
Items in motion do not become current fact
- PDPA subsidiary rulemaking wave
- Implementing PP under UU PDP
- Establishment of the supervisory authority
- PP 71/2019 revision
- Guiding circulars under Decrees 332/2026 and 333/2026
- Reported further data bill heading to an October 2026 vote
- Cybersecurity Act amendment
- NCSA standards texts