In 2025, digital governance across six major digital economies, namely Indonesia, Malaysia, the Philippines, Singapore, Thailand, and Vietnam (collectively the SEA-6) entered a phase of consolidation. Governments moved from policy formulation to implementation and enforcement. Cybersecurity, artificial intelligence (AI) and digital platform governance have increasingly been recognised as pillars of economic resilience, public trust and national security.
The defining feature of the year was not simply the passage of new laws, but the integration of strategic intent into institutional practice. This transition unfolded against intensifying global competition in AI and shifting geopolitical and geoeconomic dynamics, placing renewed emphasis on digital sovereignty alongside regional interoperability.
Building on our previous research, this report analyses governance developments through two interrelated dimensions i) the policy priorities shaping the SEA-6, and ii) the evolution of tech governance including institutional reform, digital sovereignty strategies and regional coordination. Through this dual perspective, and drawing on contributions from country experts, the report identifies three interconnected shifts that distinguish 2025 from earlier phases of regulatory experimentation.
Key Takeaways
2025 marked a significant transition from regulatory design to practical execution. Legislative advances in AI governance, online safety, cybersecurity and digital platform regulation were accompanied by strengthened enforcement agencies, clearer compliance timelines and more defined penalties.
Across SEA-6, governments have moved to formalise oversight of emerging technologies, introduce mandatory licensing for large platforms, impose rapid content takedown obligations and expand authorities’ capacity to prevent financial fraud in real time.
This indicates a regional shift towards active enforcement rather than declaratory signalling. Governments are building durable institutional capabilities such as establishing supervisory units, inter-ministerial coordination bodies and compliance frameworks. Implementation has become a core metric of governance performance.
AI governance in the SEA-6 has undergone a substantive reframing. Earlier emphasis on ethical principles and voluntary guidance has evolved towards more binding regulation and strategic infrastructure development. AI is increasingly treated as critical national infrastructure.
Governments are combining risk management with large-scale infrastructure investment and capacity-building, committing to national AI supercomputing centres, sovereign cloud platforms and centralised data infrastructure as foundational priorities. Public funding for AI advancement is expanding alongside strengthened safety testing frameworks and enterprise-level support.
At the same time, regulatory sandboxes have also become institutionalised within sectoral regimes. Structured experimentation, through controlled testing environments and assurance-based oversight, reflects a more mature balance between innovation and accountability.
This layered model, combining binding regulation, infrastructure investment and supervised experimentation, signals a structural shift. Governments are positioning themselves not solely as regulators, but as investors, coordinators and market shapers.
Regional digital cooperation advanced meaningfully in 2025. Landmark agreements moved closer to conclusion, and new multilateral initiatives in AI safety and cybercrime cooperation reflect a shift from aspirational dialogue towards negotiated interoperability.
Regional commitments are increasingly embedded in formal instruments that shape digital trade, data governance and regulatory compliance. Yet enhanced sovereignty strategies, from infrastructure localisation to assurance-based regulatory perimeters, highlight that domestic differentiation persists beneath the surface of convergence.
The central governance tension across the region lies in balancing sovereign control with interoperable regional systems. How this balance is managed will determine whether Southeast Asia consolidates into a cohesive digital market or remains characterised by fragmentation.
Looking Ahead
As a review of 2025 developments, this report provides a structured reference point for policymakers, researchers and industry practitioners seeking to understand how digital governance across the SEA-6 is evolving in practice.
More than a summary, it is intended as a starting point for meaningful conversation. Southeast Asia offers significant opportunities for mutual learning in technology governance. By documenting both convergence and divergence, this study seeks to support informed dialogue and collaboration in shaping resilient, interoperable and forward-looking regulatory frameworks.
We welcome your feedback, especially with regard to any inaccuracies,omissions or obsolete information. Please do not hesitate to contact [email protected].
