All businesses conducting EC/online sales in Laos are now required to register on the E-Trust platform under the Ministry of Industry and Commerce (MOIC) starting February 1, 2026. Continuing to sell without registration may result in fines of LAK 3,000,000 per violation (approximately JPY 170,000) or warnings under Decision 2828/MOIC.

This article is intended for managers, legal staff, and EC personnel at Japanese companies operating in Laos. Drawing on our on-the-ground support experience in Laos, it covers the full scope of the new regulations—from the three steps of the E-Trust application process and implementation of consumer protection obligations, to registration routes for foreign businesses and VAT treatment under Instruction 0558/MOF, both of which are key issues in cross-border EC.

By the end of this article, you will be able to determine whether your company is subject to registration, what needs to be prepared and by when, and whether to use a local agent route. We have also included a ready-to-use "8-item checklist" at the end.

The framework commonly referred to as Laos's "E-Commerce Law" is not a single piece of legislation, but rather a set of four regulatory documents. The E-Trust system, which comes into focus with the February 2026 enforcement date, represents the final piece of that framework.

Although Decree 296/GOV (2021) had previously established notification obligations, enforcement had become largely nominal due to the absence of accompanying penalty provisions. The November 2025 Decision 2828/MOIC clarified penalty amounts, and the subsequent Notice 3988 and E-Trust system digitized the registration route, finally establishing an effective enforcement framework.

It is important to note that missing the enforcement date (February 1, 2026) risks existing notification deficiencies being immediately exposed as violations.

Conclusion: The 2021 Decree 296/GOV and the 2012 Law on Electronic Transactions remain in effect, and the new E-Trust system and Decision 2828/MOIC serve to make them "enforceable."

• Law on Electronic Transactions (2012) — The foundational law establishing the legal validity of electronic contracts and electronic signatures. It serves as the legal basis for EC transactions themselves.
• Decree on E-Commerce 296/GOV (2021) — Stipulates notification obligations for EC operators and electronic marketplace operators, mandatory content for purchase contracts, consumer protection, and references to the Personal Data Protection Law (Law 25/NA, 2017).
• MOIC Notice 3988 (2025-12-17) — An administrative notice introducing the E-Trust platform as the means of fulfilling the notification obligations under the above Decree.
• Decision 2828/MOIC (2025-11-11) — Explicitly codifies penalties and procedures, including a fine of LAK 3,000,000 per instance of unnotified operation, plus a warning.

In other words, from February 2026 onward, the system will operate as a three-tier structure: "failure to fulfill notification obligations under Decree 296 via E-Trust will result in fines under Decision 2828."

Conclusion: EC operators and electronic marketplace operators that engage in continuous and organized commercial transactions targeting customers within Laos are subject to registration. One-off sales via SNS or purely informational websites are generally exempt, though the boundaries remain ambiguous.

The key criterion—regardless of whether B2B or B2C—is whether the transaction is completed through electronic means. Even a flow of inquiry form → email quote → bank transfer may be considered EC if the order acceptance is completed electronically. Companies are advised to conduct an internal "EC applicability" self-assessment, and to consult with MOIC in advance if the determination is inconclusive.

Conclusion: Before applying to E-Trust, it is necessary to have four items in order: "company registration information," "business license," "electronic signature/identity verification method," and "personal data protection framework."

The Department of Internal Trade — E-Commerce Management Division under MOIC serves as the point of contact for business registration (Acknowledgement Certificate). Under Decree 296, the certificate is valid for up to two years, and a renewal application must be submitted no later than 30 days before expiration.

Key items to confirm before applying:

1. Enterprise Registration Certificate (ERC) must be valid
2. Tax Identification Number (TIN) must be valid with no outstanding tax liabilities
3. Products handled must not fall under import-restricted or licensed categories (if applicable, a separate special license is required)
4. Personal data protection framework — The requirements of Law 25/NA (2017) (consent acquisition and data subject rights compliance) must be operationally in place
5. Electronic purchase contract template — Must reflect the mandatory content required by Decree 296 (product information, price, delivery terms, return conditions, and complaint contact)

Submitting an E-Trust application without these items in place will result in rejection due to incomplete documentation. Internally, it is recommended to form a cross-functional working group comprising the legal, accounting, IT, and logistics departments, and to allow four to six weeks to complete the registration process.

The set of documents required for E-Trust applications varies depending on the type of company structure in Laos. Below is a summary of the three typical patterns for Japanese-affiliated companies.

When applying as a Sole Proprietor, only three documents are required: a municipal-level business license, national ID, and tax registration. Note that Notice 3988 explicitly includes individuals within its scope, meaning Japanese expatriates selling to Lao customers via SNS may also be subject to these requirements.

Documents must be submitted in Lao, or in both Lao and English. Documents in Japanese only will require translation and notarization by a MOIC-certified translator.

Conclusion: You must confirm whether your existing license covers "business activities including EC" before submitting your application.

The notification obligation for EC operations exists on a separate layer from the ERC and business license — it does not overwrite or substitute for them. Conversely, if EC activities are not included in the scope of your existing license, you will need to amend the license itself before registering with E-Trust.

Particular attention should be paid to businesses that have been operating EC since before 2021 but have not submitted notification under Decree 296. Cases where registration has been deferred on the grounds that "it's an existing business" may be subject to immediate penalties as "unnotified operations" from February 1, 2026 onward. In our experience supporting clients, existing operators are especially prone to assuming they are not subject to these requirements — we therefore recommend conducting an early review of your compliance status.

Conclusion: E-Trust registration is completed in three steps — "account creation → information registration → approval" — with an average processing time of two to four weeks.

E-Trust is a downloadable application operated by MOIC, designed to handle the entire process from application submission to the electronic issuance of the Acknowledgement Certificate. While submissions previously required in-person visits to the Department of Internal Trade, the introduction of E-Trust now enables remote applications, making the process accessible even for businesses located in regional areas.

Overview of the application process:

[Step 1] Account creation and identity verification (1–3 business days)
    ↓
[Step 2] Registration of products and sales channel information (applicant work: half to one day)
    ↓
[Step 3] MOIC review, approval, and electronic issuance of certificate (10–14 business days)
    ↓
[Business commencement] Periodic reporting of transaction data and ongoing monitoring obligations

The following sections explain the tasks required at each step and the common pitfalls to watch out for. Internally, a structure in which the IT department handles Step 1, the EC team handles Step 2, and the legal team oversees Step 3 tends to work well.

After downloading the E-Trust app, applicants create a business account. For corporate applications, the registered representative of a legally incorporated entity in Laos, or a locally based staff member with delegated authority, must serve as the applicant.

Required identity verification information:

• Applicant's national ID number (for Lao nationals) or passport number (for foreign nationals)
• Power of attorney from the corporate representative (if the representative is not applying in person)
• Mobile phone number (for multi-factor authentication via SMS)
• Email address of the corporate representative

When a foreign expatriate is applying as the corporate representative, the validity of their Work Permit and Residence Permit will also be verified. Expired permits will result in rejection at the account creation stage, so please check the remaining validity of all visas and permits before beginning the application process.

Identity verification is typically completed within 1–3 business days; however, delays of one to two weeks have been reported during peak periods (such as fiscal year-end or immediately following the implementation of new regulations). Processing delays are particularly anticipated during the concentrated application period in February 2026, so it is strongly recommended to begin the process well in advance of the enforcement date.

After creating an account, applicants register their business details in E-Trust. The system translates the information items required under Decree 296 into an on-screen input form.

Key input fields:

Sales channels must be listed comprehensively. To avoid violations for operating unregistered channels at a later date, please conduct a full inventory of all channels — your own website, marketplaces, and SNS accounts alike.

The entered information can be exported as a PDF for internal audit purposes. It is recommended to obtain sign-off from legal and accounting teams through your internal approval workflow before submitting.

After submitting the information in Step 2, MOIC will review the content within 10–14 business days. If there are any missing documents or concerns about consistency with the scope of business, a request for corrections will be sent. Rejections can be confirmed in the notification section of the E-Trust app.

Once approved, an Acknowledgement Certificate will be issued electronically. This serves as the "official operating license for EC businesses" as defined by Decree 296.

Ongoing obligations after commencing operations must also be addressed:

• Certificate validity period = maximum 2 years. A renewal application must be submitted at least 30 days before expiration (if it lapses, the business will be treated as unregistered)
• Periodic reporting of transaction data — Regular reporting of transaction volume and sales is required (frequency varies by industry)
• Notification of changes to registered information — Changes such as the addition of sales channels, change of representative, or change of address must be reported promptly
• Maintenance of personal data protection systems — Ongoing operation of consent acquisition and data subject rights response in accordance with Law 25/NA

Renewal lapse is a particularly common issue in practice. Register the certificate issuance date plus 22 months (i.e., the start of the renewal application period) in your internal calendar, and establish a system in which the IT department or legal department takes responsibility for managing this.

Conclusion: Consumer protection obligations should be organized into two layers — "pre-sale disclosure obligations" and "post-sale complaint handling obligations" — and both the website's display content and the operational response SLA must be established simultaneously.

Decree 296 and the higher-level Consumer Protection Law No. 02/NA (2010) impose the following consumer protection obligations on EC businesses:

• Obligation to disclose product information, prices, and delivery conditions in advance
• Mandatory items to be included in electronic contracts (order confirmation screens) prior to purchase
• Clear indication of complaint reception channels and timely responses
• Consideration for personal data protection (in conjunction with Law 25/NA)

One area where Japanese companies tend to stumble is the "speed of response to consumer complaints." Regulations in the telecommunications industry (Tilleke report) require that "a resolution be presented within 7 business days of receiving a complaint," and the same standard is becoming the de facto norm in the EC industry as well.

Internally, a CRM platform that consolidates complaint reception channels (phone, email, and direct SNS contact) and the internalization of response SLAs as internal KPIs must be established by February 2026.

The "pre-sale disclosure" items required of EC sites under Decree 296 must be covered without omission. It may be helpful to think of this as the equivalent of Japan's Act against Unjustifiable Premiums and Misleading Representations and the Act on Specified Commercial Transactions.

Minimum items to be covered:

On the order confirmation (purchase completion) screen, it is recommended that the selected products, quantities, prices, delivery address, estimated delivery date, and complaint channel be consolidated onto a single screen. It is also advisable to resend the same information in an automated post-order email notification.

If prices are displayed in a currency other than LAK, including the conversion basis in accordance with the Bank of Laos (BOL) rate will help reduce the risk of price disputes after the fact.

Conclusion: Laos has no independent ADR (Alternative Dispute Resolution) institution dedicated to EC. The realistic options are mediation through Consumer Protection Associations or, ultimately, arbitration or litigation under the Economic Dispute Resolution Law.

In the event of a dispute between an EC business and a consumer, the following channels are currently anticipated in Laos.

The World Bank has also noted that independent ADR dedicated to EC (including Online Dispute Resolution / ODR) is "underdeveloped," and for the time being it is essential for businesses to internalize their complaint management processes.

In practice, it is recommended to structure complaint escalation as Tier 1 (customer support) → Tier 2 (store manager / supervisor) → Tier 3 (legal), and to set a KPI of resolving 90% or more of cases by Tier 2.

Conclusion: In cross-border EC, it is necessary to distinguish between two points — "Decree 296 is silent on the registration of foreign businesses" and "VAT Notification 0558/MOF captures foreign digital businesses" — and to use the local agent route and the VAT-only standalone registration route appropriately.

There are typically three patterns for Japanese companies expanding EC operations targeting Laos, and the legal issues differ for each.

In practice, Pattern B (direct cross-border sales) is the riskiest, as it remains unclear to what extent the registration obligations under Decree 296 apply to foreign businesses, while on the tax side, DTax registration is definitively required — an asymmetric situation.

The choice of pattern is recommended to be evaluated along three axes: sales volume, logistics costs, and tax optimization. Based on our experience, the most common approach is a phased transition in which test sales of under USD 50,000 per year are launched under Pattern B (direct sales from headquarters), and then shifted to Pattern A (local entity) or Pattern C (agent) as the business scales.

Decree 296/GOV contains no explicit provisions (is silent) regarding EC registration for foreign operators. VDB Loi has also noted that it "is silent on the registration procedures and tax treatment for foreign operators selling on licensed marketplaces in Laos."

The following options are practical in real-world implementation:

1. Sales via Local Agent/Distributor (Recommended)

   • Contract a Lao entity as an agent and register under the agent's name with E-Trust
   • The agent handles consumer relations, complaints, and logistics
   • The Japanese entity ships wholesale to the Lao agent
   • The majority of cross-border EC risks can be consolidated on the agent's side

2. Establishment of a Local Lao Entity (Subsidiary or Branch)

   • Setup and operating costs are higher, but regulatory compliance is the clearest path
   • The appropriate route when substantial revenue is expected over the medium to long term

3. Continued Cross-Border Direct Sales (Type B) (High Risk)

   • Risk of violation findings remains at any time until the interpretation of Decree 296 is finalized
   • DTax registration under VAT 0558/MOF is separately required
   • Should be limited to a short-term testing phase

If the agent route is selected, the contract should explicitly state that "responsibility for compliance with Lao E-Commerce Law, Consumer Protection Law, and PDPL rests with the agent" and that "fines resulting from violations are borne by the agent," thereby providing a legal basis for risk transfer.

Conclusion: When a Japanese entity sells directly to Lao consumers via cross-border EC, it is required to register for VAT through DTax under Instruction 0558/MOF and collect VAT on top of sales prices.

Key timeline for VAT Instruction 0558/MOF:

Key VAT requirements:

• Scope: Non-resident operators providing digital goods, services, or goods via electronic platforms to users (individuals or entities) within Laos
• Registration method: Obtain a VAT registration number through the Lao Revenue Department's DTax online system
• VAT rate: Standard 10% (as of 2026)
• Collection and remittance: Collect VAT on top of sales prices and file/remit periodically via DTax
• Invoicing: Issue proper VAT-inclusive invoices for sales directed to customers within Laos

It is important to note that the E-Commerce Law (Decree 296) and VAT (0558/MOF) operate on separate layers, and satisfying one does not exempt a business from obligations under the other. There are cases where VAT registration is required even without Decree 296 registration, and vice versa. It is recommended to plan an internal project that addresses both simultaneously.

Below is a summary of the five most common failure patterns in E-Commerce Law compliance that we have observed firsthand while supporting Japanese companies entering Laos, along with recommended countermeasures.

Patterns 1 and 2 in particular carry a high risk of becoming active violations the moment the February 1, 2026 enforcement date arrives. As the enforcement date approaches, it is recommended that companies conduct a three-point internal review: "Is our business subject to registration?", "Do we have an existing registration?", and "Is our registration information up to date?"

As enforcement mechanisms are fully activated, MOIC is expected to strengthen its monitoring. To avoid not only fines upon discovery of violations but also the risk of license suspension or inability to continue operations, we have consistently recommended that companies begin preparations at least 60 days before the enforcement date (i.e., from early December 2025).

To ensure nothing is overlooked in preparing for the Lao E-Commerce Law and consumer protection requirements ahead of the February 1, 2026 enforcement date, the following 8 items should be addressed in order.

1. Determine EC applicability — Assess using internal criteria whether your company's sales activities fall within the scope of Decree 296
2. Review existing licenses — Confirm whether EC is included in the business scope of your ERC; if not, file an amendment application with MOIC
3. Prepare the document set — Gather the required registration documents based on your entity type (ERC, TIN, articles of incorporation, representative's ID, etc.)
4. Create an E-Trust account — Download the app and complete identity verification (1–3 business days)
5. Register sales channel information — Submit a comprehensive application covering your own website, marketplaces, and SNS channels
6. Obtain the Acknowledgement Certificate — Allow 10–14 business days for MOIC approval
7. Implement consumer protection processes — Establish disclosure obligations (pricing, returns, contact information) and a complaint handling SLA (7 business days)
8. Address cross-border EC and VAT 0558/MOF — For cross-border direct sales, complete VAT registration via DTax; for sales through a local agent, clearly define the allocation of responsibilities in the contract

These matters involve cross-functional collaboration across legal, accounting, IT, logistics, and customer support. Starting too close to the enforcement date carries a high risk of not completing preparations in time. It is recommended that companies establish an internal working group no later than 60 days before the enforcement date (December 2025), with designated owners and deadlines assigned to each item.

The Lao E-Commerce Law is not a standalone regulation; it is part of a "Lao Digital Compliance Cluster" that operates in conjunction with the PDPL (Law 25/NA, 2017), VAT (Instruction 0558/MOF), and the Consumer Protection Law (Law 02/NA, 2010). Our firm supports companies in building internal frameworks that address all four areas in an integrated manner, helping clients establish a compliance foundation from a medium- to long-term perspective—not merely catching up in the run-up to the enforcement date.