You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

Athistha (Nop) Chitranukroh

Partner and Director, Corporate and Commercial

Biography

Nop Chitranukroh is a partner and director of Tilleke & Gibbins’ corporate and commercial group. She is one of the leaders of the firm’s technology and insurance teams and regularly advises clients across industries on a wide range of regulatory compliance matters relating to cybersecurity and data privacy, fintech, insurance, insurtech, and payments. She also represents multinational and local financial services, payments, and technology industry clients on a range of strategic matters, including market entry, M&As, and ongoing compliance across Southeast Asia.

Prior to joining Tilleke & Gibbins, Nop served as Thailand general counsel of an American multinational corporation, listed on the New York Stock Exchange, where she oversaw all operations within the legal department in Thailand. Nop was previously Asia-Pacific regional counsel for the same multinational finance and insurance corporation, based in Singapore. She has also served as a legal counsel at an industry-leading Irish-American financial services and software-as-a-service (SaaS) provider of payment processing software and related application programming interfaces (APIs) for e-commerce websites and mobile applications.

Widely recognized as a top practitioner in insurance and TMT legal practice in Southeast Asia, Nop is ranked as a leading lawyer in technology by Chambers Asia-Pacific, a Next Generation Partner in TMT by The Legal 500, a leader for data in Who’s Who Legal Southeast Asia 2022-2024. Most recently, Nop has been named to the Asia Super 50 TMT Lawyers 2023 and 2024 list by Asian Legal Business from Thomson Reuters. Nop has been appointed as the Knowledge Network Chair from IAPP for Thailand for 2024-2026. In 2023, Nop was named one of Asia Super 50 TMT Lawyers by Thomson Reuters’ Asian Legal Business.

Nop is a Certified Information Privacy Professional/Asia (CIPP/A) with the International Association of Privacy Professionals (IAPP) and serves as an advisory board member of Insurtech Asia. She has acted as a legal advisor for the Thailand Insurance Association for more than a decade.

Experience

  • Advising a multinational American corporation listed on the S&P 500 on a number of M&A transactions, including its corporate restructuring in Thailand, conversion into a public company, transfer of an entire business to one of its Thai entity and a joint venture arrangement.
  • Advising one of the world’s largest international insurance broker groups on its M&A and corporate restructuring in Thailand, including a joint venture arrangement with Thai investors and investment structuring in the Indochina region.
  • Advising one of the world’s largest search engine companies on setting up operations in Thailand, including drafting, negotiating, and reviewing an extensive range of business and technology transactional arrangements. This includes setting up the client’s insurtech and fintech business partnership with a local business operator.
  • Assisted a British insurance broker in an insurtech matter, involving setting up its online insurance products marketplace in Thailand and advising on business arrangement structures with all of the top ten leading motor insurers in the Thai market.
  • Advising a global technology company, based in Asia, on regulatory matters related to beacon devices, over-the-top (OTT) businesses, and data privacy regulatory requirements.
  • Advising a global social media/technology company, based in Korea and Japan, on one of its largest joint venture arrangements with one of the largest local mobile carriers and transportation operators for its e-payment system and fintech-related business in Thailand.
  • Advised one of the largest property and casualty insurers on a facultative reinsurance placement for a USD 870 million hydroelectric energy project involving parties from Thailand and Laos.
  • Providing advice to a leading American broadband and telecommunications company on the launch of its fintech business in Thailand, and on data privacy regulatory matters.
ABOUT Athistha (Nop)

Practices

Corporate/M&A

Locations

Languages

    Thai

    English

Education

    LLM, University of Wisconsin

    LLM, Georgetown University

    LLB, Chulalongkorn University

Insights

August 20, 2026
Thailand has established a new cross-ministerial committee to oversee data center operations nationwide. On August 5, 2026, the Thai cabinet approved the Prime Minister’s Office Regulation on the Data Center Business Policy Committee, which was published in the Government Gazette on August 13, 2026, and is now in effect. The regulation reflects the government’s policy to elevate Thailand’s digital economy and promote investment in digital infrastructure and AI. The key features of the new committee are outlined below. Definition of “Data Center” Under the regulation, “data center” is defined as a building, premises, or structure that uses electronic equipment to provide services related to the collection, storage, processing, hosting, or transmission of data by electronic means to third parties that are not affiliates, as further determined by the Data Center Business Policy Committee. Committee Composition The committee will be chaired by a deputy prime minister designated by the prime minister, and will have three vice-chairs comprising the ministers of digital economy and society, interior, and energy. The committee also includes 12 ex-officio members: the permanent secretaries of finance, agriculture, natural resources, energy, interior, digital economy, industry, and commerce; the secretaries-general of the Board of Investment (BOI), Energy Regulatory Commission, National Broadcasting and Telecommunications Commission (NBTC), and National Water Resources Office; and the director of the Energy Policy and Planning Office. Up to three expert members may be appointed by the prime minister for two-year terms, renewable once. The secretary-general of the National Economic and Social Development Council (NESDC) serves as member and secretary, with up to two NESDC officials serving as assistant secretaries. Powers and Duties The committee is empowered to: Propose policies, standards, and operational frameworks for government agencies in approving, licensing, issuing investment promotion certificates, or providing services to data center operators in Thailand; Study, analyze, and
August 20, 2026
As part of its membership in Lex Mundi, Tilleke & Gibbins has released the latest edition of its Guide to Doing Business in Thailand, providing an overview of the legal, regulatory, and commercial considerations for companies establishing or expanding operations in Thailand. The 2026 edition offers practical insight into the country’s business environment, investment framework, and operational requirements. The guide covers a wide range of topics relevant to foreign and domestic investors, including: Investment incentives and promotion schemes Financial facilities and banking regulations Exchange controls and money transfers Import and export regulations Business structures and incorporation options Requirements for establishing a business Operational and compliance considerations Business cessation and insolvency procedures Employment and labor laws Taxation Immigration and visa requirements Prepared by Tilleke & Gibbins lawyers across multiple practice areas, the publication outlines key aspects of doing business in Thailand, including foreign investment restrictions, regulatory compliance obligations, corporate structures, employment requirements, and recent legal and economic developments affecting investors. The publication forms part of Lex Mundi’s Country Guides series, a global collection of jurisdiction-specific reference materials prepared by member firms around the world. Together, these guides help companies evaluate opportunities, compare regulatory environments, and plan international business activities across multiple markets. The full Guide to Doing Business in Thailand 2026 is available through the button below.
August 18, 2026
The Bank of Thailand (BOT) is seeking public comment on proposed amendments that would significantly expand know-your-customer (KYC) and customer due diligence (CDD) requirements for cash-related transactions at financial institutions (FIs) and specialized financial institutions (SFIs). Released on August 5, 2026, the proposed regulation would supersede BOT Notification No. 16/2569, which focused primarily on cash withdrawal transactions. The public comment period is open through September 3, 2026. The amendments reflect concerns that FIs and SFIs may be used to facilitate the movement, concealment, and conversion of criminal proceeds, potentially damaging institutional operations and public confidence in the financial system. Expanded Scope of Covered Transactions The most significant change is the broadening of the definition of “cash-related transactions.” Previously, the regulation covered only cash withdrawals and uncrossed check withdrawals. The amended regulation extends coverage to include: Cash deposits, check deposits, or receipt of funds from the public not in the form of deposit accounts; Thai baht (THB) banknote exchange (different denominations); Receipt of cash for issuing checks and drafts; and Purchase, sale, or exchange of foreign banknotes. Mandatory Identity Verification and Risk Management For all cash-related transactions, FIs and SFIs must require customers, or authorized or delegated persons, to present identification or verify their identity before every transaction, including one-time (walk-in) transactions. Specific identification requirements vary by transaction type, customer nationality, and channel (branch vs. electronic). FIs and SFIs must also establish comprehensive risk management processes and procedures for cash-related transactions. These requirements include identifying customers or authorized representatives in accordance with transaction-specific verification standards, analyzing customer behavior, implementing risk-management measures proportionate to the customer’s risk profile, and recording abnormal behavior in relevant systems. The BOT also encourages institutions to proactively guide customers toward transaction channels that offer greater traceability than cash. For corporate customers in high-risk business sectors—including foreign
August 14, 2026
Thailand’s Office of the Insurance Commission (OIC) has issued guidelines clarifying the boundaries between permissible and prohibited activities for unlicensed individuals—including influencers, bloggers, and content creators—when communicating about insurance products on social media. The Good Practice Guidelines for Persons Not Licensed as Insurance Agents or Brokers Regarding the Dissemination of Insurance Content Through Digital Media B.E. 2569 (2026) took effect on July 24, 2026. Activities Requiring a License The guidelines reserve the following activities for licensed agents and brokers: Soliciting or facilitating insurance contracts. Providing personalized advice on product suitability. Recommending policy cancellation to purchase promoted products. Creating links that facilitate contract formation. Receiving performance-based compensation tied to policies or premiums generated. Importantly, boilerplate disclaimers such as “this is not a recommendation to buy insurance” will not shield individuals from liability if the OIC views the content as personalized advice or solicitation. Permitted Activities Unlicensed persons may present general educational content about insurance—such as explaining terminology, sharing industry statistics, reporting news, or sharing personal experiences—provided the content does not target specific individuals to purchase from specific companies. The guidelines also set out best practices for communication, including presenting information in a fair and balanced manner that covers both benefits and limitations, encouraging consumers to read policy terms and consult licensed professionals, verifying information from credible sources before dissemination, and exercising special care when the audience may include vulnerable groups such as persons aged 60 and older. Prohibited Practices Prohibited practices include fear-based marketing, creating artificial urgency, omitting material limitations, making exaggerated claims, falsely claiming professional credentials, using fake engagement mechanisms, and sharing false or misleading content. The guidelines also reinforce the prohibitions under section 83 of the Life Insurance Act B.E. 2535 and section 78 of the Non-Life Insurance Act B.E. 2535 against soliciting insurance contracts with foreign operators

Awards & Rankings

August 13, 2026
Tilleke & Gibbins has been recognized in the inaugural Asia Top Cybersecurity & Data Law Firms 2026 list from Asian Legal Business (ALB), published in the magazine’s August 2026 edition. The new ranking highlights leading law firms across Asia with dedicated cybersecurity, privacy, and data regulation practices, recognizing firms with a proven track record of advising clients on complex cybersecurity and data law matters. Tilleke & Gibbins is one of only 21 firms included in the inaugural list, reflecting the firm’s strength in data privacy, cybersecurity, technology, and regulatory matters throughout Southeast Asia. According to ALB, the firms selected for inclusion are recognized for their capabilities in areas such as privacy compliance, incident response, digital investigations, and technology-enabled client service. The recognition underscores the continued growth and regional prominence of Tilleke & Gibbins’ data privacy and cybersecurity practice, which advises clients across a broad range of industries on data protection compliance, cybersecurity preparedness and response, technology transactions, digital platform regulation, and emerging regulatory developments. This latest honor reflects the firm’s commitment to helping clients navigate an increasingly complex digital and regulatory landscape and reinforces its reputation as a leading adviser on technology, privacy, and cybersecurity issues across the region.
July 22, 2026
Tilleke & Gibbins has been named Best Insurance Law Firm in Thailand in the InsuranceAsia News Country Awards for Excellence 2026. This is the firm’s first recognition from InsuranceAsia News, and Tilleke & Gibbins was the sole law firm honored in the Thailand awards. The award recognizes the strength of Tilleke & Gibbins’ insurance practice and the team’s work advising clients in the sector. InsuranceAsia News selected the winners based on submission reviews, independent research, market knowledge, and analysis by the publication’s judging panel. InsuranceAsia News provides news, analysis, and market intelligence for insurers and related organizations across Asia. For more information and to view the full list of winners, please visit the InsuranceAsia News website.
May 11, 2026
Tilleke & Gibbins has been recognized in five practice areas at the Asia Business Law Journal (ABLJ) Vietnam Law Firm Awards 2026, reflecting the firm’s continued strength across a range of legal disciplines in Vietnam. The firm received honors in the following categories: Artificial Intelligence Data Compliance and Cyber Security IP Litigation Labor & Employment Technology, Media & Telecommunications The ABLJ Vietnam Law Firm Awards highlight leading law firms across key practice areas, with multiple firms typically recognized in each category. The 2026 edition marks the fourth year of the awards program. These recognitions underscore the work of Tilleke & Gibbins’ Vietnam-based teams, particularly in technology-driven and regulatory-focused areas of practice. For more details and the full list of winners, please visit the ABLJ website.

Other Professionals