The ASEAN Secretary-General is bringing a delegation to Shanghai for the 2026 World AI Conference and the High-Level Meeting on Global AI Governance.
If you're taking a product with AI or data features into Southeast Asia, that headline matters more to you than it looks.
Here's the counter-intuitive part I keep telling clients: Southeast Asia isn't one market. It's ten legal jurisdictions.
ASEAN is a consensus-based body. It produces frameworks, guidelines, model clauses — not binding supranational law the way the EU does. So the thing that actually governs you is the country you land in.
Singapore runs a mature data protection regime. Vietnam has tightened data localization and cybersecurity requirements hard in recent years. Indonesia, Thailand and Malaysia each have their own personal data laws, with very different penalties and enforcement appetites. A user-data workflow that's compliant in Singapore can cross a line in Vietnam. (Confirm specifics with local counsel and current law.)
I come from a computer science background, so when I look at an AI product going abroad I split it into two layers:
Data layer — Can the biometric, location and behavioral data you collect leave the country, or must a copy stay local? Localization-heavy jurisdictions may force you onto in-country servers.
Algorithm layer — For credit scoring, recommendation, or automated decisions, more jurisdictions now expect explainability and a human-in-the-loop.
Three things worth doing now:
- Build a real "landing-country list." Don't say "expanding into Southeast Asia." The order you enter Vietnam vs. Indonesia changes your compliance cost dramatically.
- Map your product's data flow — what you collect, where it sits, who it goes to, whether it crosses borders.
- Run a compliance pre-review on the AI features before launch. Rearchitecting after a complaint costs more than a rewrite.
Have a specific country and product in mind? Send me the situation and I'll help you separate the real risks from the noise.
———
Mike Wu, China-licensed Attorney · Cross-border practice
4 languages (CN/EN/ES/JA)
Site: wzklaw.com/contact.php?source=linkedin · Book consultation: wzklaw.com/contact.php?source=linkedin
#CrossBorderLaw #AICompliance #SoutheastAsia #DataGovernance #ASEAN