You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 23, 2024

Bank of Thailand Implements New Responsible Lending Regulation

Subscribe to Updates

The Bank of Thailand (BOT) has issued a new notification to sustainably address Thailand’s household debt problems by establishing responsible and fair lending requirements for lending service providers throughout their lending journey.

Notification No. SorKorChor. 7/2566 Re: Provision of Responsible and Fair Lending was announced on December 21, 2023, and took effect on January 1, 2024. The lending service providers this notification applies to include both commercial banks and nonbank business operators (e.g., personal loan business operators, nano-financing business operators, and credit card business operators).

The key principle of this notification is to provide criteria for responsible and fair lending that supplement market conduct principles, covering eight areas in the debt cycle:

  • Lending product development. Service providers must offer lending products that are suitable to customers’ needs and repayment capabilities, avoiding encouragement of excessive debt. Loan interest rates should align with the borrower’s risk profile and credit characteristics (risk-based pricing) to ensure fair contract conditions.
  • Advertising. Service providers must prepare and control advertisements with “correct and clear” content, presenting complete and comparable conditions, interest rates, and various fees to customers. The advertisements should not encourage excessive debt, enabling customers to make informed decisions and promoting financial discipline.
  • Sales. In the selling process, service providers must ensure that customers receive complete, accurate, and unexaggerated information that facilitates appropriate consideration of decisions based on a correct understanding of the product or service. Products should also align with customers’ purposes or needs for fund utilization, avoiding encouragement of excessive debt.
  • Consideration of debt repayment ability (affordability). Service providers must be conscientious in considering customers’ debt repayment ability, taking into account all obligations and residual income.
  • Promotion of discipline and financial management. Service providers must provide important information and warnings to debtors, including regular reminders to promote responsible borrowing.
  • Helping debtors with persistent debt. Service providers must convey essential information to make debtors aware of the negative effects of persistent debt. This includes establishing standard guidelines for helping debtors find an appropriate way to settle their debts.
  • Helping debtors with debt repayment issues. Service providers must promptly propose debt restructuring guidelines in line with debtors’ ability to repay as soon as debtors begin to show signs of repayment problems.
  • Legal proceedings and debt sales to other creditors. Upon request, service providers must inform debtors of their rights and important information when legal action has been taken. Additionally, debtors should be afforded an opportunity to engage in mediation regarding their debt problems. This includes providing appropriate debt repayment conditions after debt has been sold and transferred.

For more information on this BOT notification, or on any aspect of conducting financial or lending business in Thailand, please contact Athistha (Nop) Chitranukroh at [email protected], Pornpan Wichawut at [email protected], or Karnravee Jitvilai at [email protected].

Related Professionals

Industries

Fintech

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

July 26, 2023
Thailand’s Electronic Transactions Development Agency (ETDA) held a briefing session on July 20, 2023, laying out the changes and new requirements in draft sublaws under the Royal Decree on Digital Platform Services. These sublaws are expected to be announced in August 2023. The key changes and new requirements are listed below. The ETDA has drafted guidelines on the methods for identifying active users to give digital platform service operators a better understanding of the calculation methods. The definition of “users” for calculating annual monthly active users (AMAUs) has been reduced in scope to cover only users in Thailand. E-marketplace digital platform services that will suspend or terminate operations for specific users must inform the affected users and provide a period for them to challenge the suspension or termination. Digital platform service operators cannot use the requirements to identify their active users as a legal basis for processing users’ personal data, especially for profiling and tracking activities. The sublaws on announcement of terms and conditions (T&Cs) and changes to T&Cs, once issued, will take effect on January 3, 2024, while the other sublaws will take effect immediately (i.e., August 21, 2023). This shows that the ETDA has acknowledged the private sector’s feedback that the requirements on T&Cs will take more time for operators to comply with. The requirements for changing T&Cs have been adjusted. Under the current draft, the required advance notification period can be exempted if a change in the T&Cs is for the purpose of, for example, rolling out new products or services and improving the platform. Required submissions under the Royal Decree for Digital Platform Services and its sublaws will be made through the ETDA’s online portal. There will likely be no extensions granted for compliance with the Royal Decree for Digital Platform Services and its sublaws
Read More
July 14, 2023
The Bank of Thailand (BOT) has issued new notifications amending regulations for payment businesses that fall under the Payment Systems Act B.E. 2560 (2017) to promote transparency and good governance in the payment industry. Notification No. SorKorChor 2/2566 (“Notification 2”) increases the required qualifications for applicants seeking a license to provide payment services designated as being under the BOT’s supervision, and Notification No. SorKorChor 4/2566 (“Notification 4”) stipulates additional duties and exemptions for certain types of business operators. The notifications were published in the Government Gazette on July 7, 2023, and came into effect the following day. Additional Qualifications Notification 2 expands the list of prohibited characteristics for business operators applying for a license or registration to engage in a designated payment service, and their directors. For example, applicants must not have been ordered to suspend or cease their operations, and their registration or license to engage in financial business or operate a designated payment system or service must not have been revoked. The notification defines “financial business” as including financial institutions, credit card business, personal loan business, securities business, and so on. In addition, applicants’ directors and management must not have prohibited characteristics, such as being involved in the management of a financial business or designated payment system or service that was ordered to suspend or cease its operations. The applicable registration or license also must not have been revoked. Reporting Requirements During the application process, Notification 2 requires applicants to disclose information on shareholders and related parties (including spouses) who hold an aggregate 10 percent or more of the total paid-up shares. Notification 4 imposes this same reporting duty regarding shareholders and related parties but applies it to licensed operators in an ongoing manner. Existing payment service operators must make their first report of this information to
Read More
March 20, 2023
Thailand has enacted new legislation to counter cybercrime and scams. The Royal Decree on Measures for Protection and Suppression of Technology Crimes B.E. 2566 (2023) (“Cybercrime Decree”) was published in the Government Gazette on March 16, 2023, and took effect the following day. The Cybercrime Decree provides a new legal tool to interrupt the money-laundering process and aims to crack down on cybercrime perpetrators and scammers by providing stronger legal measures applying to certain types of offenders that had not been sufficiently covered by existing laws. This new legislation grants victims the right to have commercial banks and online payment platforms freeze suspicious transactions and obligates these banks and platforms to comply with such requests. It further requires these banks and platforms—as well as other service providers—to share data for the prompt prevention and suppression of cybercrime. The key rights, duties, and offenses established by the Cybercrime Decree are detailed below. Freezing Transactions The Cybercrime Decree requires commercial banks and online payment platforms to temporarily freeze (for 72 hours) any related transactions of their account holders upon receipt of an alert from the account holder that he or she is the victim of cybercrime. Victims can report these illicit transactions by phone or electronic means. If by phone, the relevant bank or platform must document the call. The victim must file a police complaint about the illicit transaction within 72 hours of the freeze being made. A police inquiry officer will then notify the bank or platform about the complaint, and the transaction freeze must be maintained for seven days from the filing of the complaint with the police. The police will then determine whether it is necessary to keep the transaction frozen for longer than seven days. If the seven days lapse without a further order to freeze the
Read More
February 10, 2023
On January 16, 2023, Thailand’s Securities and Exchange Commission (SEC) prescribed a set of security measures that digital asset business operators must implement if they provide custody of digital assets for their customers. The new security measures are prescribed in two notifications from the SEC and its office on digital asset wallet management systems and cryptographic key management systems, with the aim of safeguarding digital assets in custody against loss, fraud, and cybertheft. The notifications took immediate effect. The new security measures and the management systems are summarized below. Policy and guidelines for managing systems related to digital asset custody Digital asset business operators must have a written risk management policy for all systems relating to digital asset custody, approved by their board of directors and made accessible to all employees. The policy must be reviewed or revised at least once annually, or promptly if any potential risks are identified. Specific procedures must be implemented, such as establishment of a compliance team and internal controls. Management of systems for digital asset wallets and cryptographic keys Digital asset business operators must have policies and procedures for managing all systems relating to digital asset custody. This includes properly designing, developing, and managing digital asset wallets in a safe and secure manner. The same requirement on policies and procedures applies to cryptographic key management as well. Management of incidents that may affect systems related to digital asset custody Digital asset business operators must have measures in place to manage incidents that may impact systems related to digital asset custody. The measures include designating a person responsible for incident management, testing and reviewing the incident management policy annually, reporting any incidents affecting digital asset custody to the designated responsible person and the SEC immediately, and conducting a digital forensic investigation with an independent
Read More