You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 7, 2020

Bank of Thailand Introduces Digital Personal Loans

Subscribe to Updates
Informed Counsel

With technological advancements, business operators are able to access more varieties of data than ever before, and are able to use that data to assess the terms on which loans are provided. This means that they can provide services to consumers more efficiently and with lower operating costs. More importantly, however, it allows them to provide financial services to a broader range of consumers who would otherwise not be able to access vital funds.

To facilitate this, on September 15, 2020, the Bank of Thailand (BOT) introduced a new type of personal loan—the digital personal loan—under BOT Circular Re: Rules, Procedures and Conditions for the Undertaking of Digital Personal Loan Business. Sometimes known as “quick loans” or “easy loans” in other jurisdictions, this new type of loan instrument is intended to promote Under the circular, a digital personal loan is defined as a personal loan for which business operators utilize digital technology and alternative data (e.g., utility and mobile phone bill payment records) to assess the borrower’s ability and willingness to repay. The digital personal loans do not include loans for which car registration is used as collateral.

The key requirements for undertaking a digital personal loan business are as follows:

  1. Business operators are expected to use technology and alternative data to determine the customer’s risk profile, based on their ability or willingness to repay. The alternative data that is used must be from a trusted source and use a sensible hypothesis in assessing the customer’s credit profile. Such business operators may comply with the BOT’s information-based lending guidelines.
  2. Business operators must use electronic channels for both the provision and repayment of the loans. This may include disbursing and repaying by bank transfer, direct debit, or e-money to create a digital footprint in the financial sector for the customers.
  3. Business operators must disclose relevant information to customers, including interest rates, fines, service fees, operating fees, outstanding loan tables, and any other fees relating to the Digital Personal Loan. This information must also be easily accessible for customers through electronic means (for example, by being hosted and easily accessible on the loan providers website).
  4. The maximum loan amount is THB 20,000 with a tenure of not more than six months.
  5. Business operators are prohibited from charging additional interest rates, fines, service fees, operating fees, or any other fees to customers for early repayment of a loan.
  6. Business operators are required to have IT security risk management measures in place. This includes measures to protect data from unlawful collection, processing, use, and destruction. Business operators also have an obligation to business continuity management, which they must satisfy by having a business continuity plan and an IT Disaster Recovery Plan. If the business operator will outsource their IT systems or connect their IT systems to third party services in a way that will involve the transfer of sensitive data (e.g. by using a cloud computing service), the third party must also have risk management and cybersecurity processes in place to the same standards.

Personal loan license holders that wish to offer digital personal loans must submit an application and supporting documents, including information on their minimum viable product, for BOT consideration at least 30 business days prior to the date on which they plan to begin offering digital personal loans. However, this application requirement is waived if the provision of digital personal loans only uses traditional methods of assessing customers’ ability or willingness to repay their loans (such as the National Credit Bureau).

Business operators who would like to issue digital personal loans but do not currently have a personal loan license must first apply for one from the BOT in accordance with the requirements of BOT Notification SorNorSor. 12/2563 Re: Regulations, Procedures and Conditions for Undertaking Business of Personal Loan under Supervision. In practice, these business operators may apply for a personal loan license and simultaneously apply for BOT approval of their plan to issue digital personal loans.

While digital personal loans look set to become a major offering in Thai consumer banking, they are also of particular interest to non-traditional loan operators—especially e-money operators, large-scale casual employers (such as ride-share operators and delivery services), and even retailers, as has been the case with similar “quick loan” systems in other jurisdictions.

Download Full Article
Related Professionals

Industries

Technology

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

March 30, 2026
On March 24, 2026, the Trade Competition Commission of Thailand (TCCT) published its long-anticipated Guidelines on Multi-Sided Platforms and E-Commerce Businesses in the Government Gazette, following the conclusion of a public hearing conducted last year. The guidelines entered into force on March 25, 2026, and significantly expand the application of Thai competition law to digital platform ecosystems. These rules introduce targeted restrictions on platform conduct, such as price-ranking algorithms and tying and bunding, that leverages network effects, and will have far-reaching implications across Thailand’s digital economy—affecting not only platform operators but also platform participants, including sellers, logistics providers, advertisers, and payment service providers operating on or alongside such platforms. The guidelines clarify how existing prohibitions under the Trade Competition Act B.E. 2560 (2017) (TCA)—including abuse of market dominance, cartel conduct, and unfair trade practices—apply in the context of platform-based business models. While many provisions reflect earlier draft guidelines, the final version delivers more precise definitions and clearer enforcement parameters, increasing regulatory certainty while also raising compliance expectations. Applicability The guidelines introduce core definitions that determine their coverage: Multi-sided platform: A platform that acts as an intermediary connecting two or more groups of users, enabling them to have direct interaction in order to exchange or rely on services from one another. Examples include digital platforms for trading goods or services (e-commerce), as defined below. Digital platform for trading goods or services (e-commerce): A platform that acts as an intermediary connecting the distribution, purchase, sale, or exchange of goods or services. This includes operations carried out to facilitate transactions or interactions between business operators through an electronic transaction system, regardless of whether a service fee is charged. Operator of a digital platform business for trading goods or services: A provider of digital platform services for trading goods or services, as described
Read More
March 27, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has publicly indicated that it is preparing a new regulatory framework for data center operators that may introduce foreign-ownership restrictions. In particular, the NBTC is considering reclassifying data center operations from a type 1 telecommunications business license to a type 3 license. If implemented, this change would subject data center operators to a significantly more stringent regulatory regime, especially in relation to foreign ownership and control. The NBTC has indicated that it intends to propose a draft framework to the NBTC board. This would be followed by a public hearing process, with a view to implementing the new rules within 2026. Under the Telecommunications Business Act B.E. 2544 (2001), as amended, telecommunications businesses operating under type 3 licenses are subject to foreign ownership restrictions, including a requirement that less than 50% of the total issued shares be held by foreign shareholders. In addition, type 3 licensees are subject to foreign dominance restrictions, which prohibit arrangements that allow foreigners to dominate the business. These foreign dominance restrictions are broad in scope and may capture various forms of direct and indirect control or influence. This includes circumstances in which a foreign national is able to influence or control the formulation of policy, management, or business operations, or the appointment of directors or senior executives. At this stage, the exact scope of the proposed rules remains unclear. Businesses with existing or planned data center operations in Thailand should therefore monitor upcoming NBTC developments in this regard and prepare for the expected public hearing process.
Read More
March 27, 2026
Vietnam’s emerging governance framework for artificial intelligence (AI) is developing through a multi-layered structure comprising three components: Policy instruments setting national priorities for AI development; Regulatory framework governing development, provision, deployment and use of AI; and Technical standards and voluntary guidelines. Policy level. At policy level, the foundation for a strategic framework for AI development and governance was laid in 2021 by the National Strategy for Research, Development and Application of AI until 2030, aimed at strengthening the national AI ecosystem and positioning Vietnam as a regional AI innovation hub. Subsequently, resolution No.57-NQ/TW (2024) identified AI as a key driver of science, technology, innovation and national digital transformation. AI was also designated as a strategic technology under decision No.1131/QD-TTg (2025) listing priority technologies across sectors. Regulatory framework. At the legislative level, the new Law on Artificial Intelligence took effect on 1 March 2026, establishing the core regulatory framework governing development, provision, deployment and use of AI systems. Controlled testing for emerging AI technologies is implemented under the Law on Science, Technology and Innovation. The AI Law is expected to be further operationalised through implementing instruments, most notably a draft decree guiding the AI Law, and draft decision of the prime minister identifying high-risk AI systems (both published in February 2026). A decision establishing priority datasets for AI development is also anticipated. Compliance obligations may also arise under sectoral regulatory regimes, including data protection, cybersecurity, banking, consumer protection, e-commerce and intellectual property, particularly where AI systems are used in automated decision-making or data-driven services. Technical standards and non-binding guidelines. Vietnam’s AI governance framework is also supported by technical standards and voluntary guidelines. A key instrument is decision No.1290/QD-BKHCN (2024), providing guidelines for responsible research and development of AI systems, and represents Vietnam’s first national AI ethics code. The Ministry of Science and Technology
Read More
March 27, 2026
In response to the rapid advancement of artificial intelligence (AI) and evolving global digital trends, Thailand has undertaken significant efforts to establish a comprehensive national policy framework aimed at fostering an AI ecosystem. This framework seeks to promote the responsible development and deployment of AI technology to enhance Thailand’s economic competitiveness and improve quality of life, with targeted implementation by 2027. In furtherance of this national AI policy, regulatory authorities have initiated efforts to develop and refine the applicable legal framework, including the drafting of Thailand’s first unified AI legislation. Pending the composing and enactment of such comprehensive legislation, sector-specific regulators have proactively issued guidelines applicable to regulated entities within their respective jurisdictions, including financial institutions, banks, insurance companies, securities and derivatives business operators, and digital asset service providers. Concurrently, cross-sectoral regulatory bodies, notably the Personal Data Protection Committee (PDPC) and the National Cyber Security Agency (NCSA), have promulgated guidelines applicable to all business operators within their regulatory purview. While unified AI legislation has not been enacted, the design, development and use of AI in Thailand in various industries is still subject to existing sector-specific legislation. National AI policy The Thai cabinet approved the Thailand National AI Strategy and Action Plan (2022-2027) in July 2022, aiming to establish an AI development and application ecosystem by 2027. The strategy is built around five pillars: Preparing social, ethical, legal and regulatory readiness for AI; Developing national infrastructure; Increasing human capability and AI education; Driving AI technology and innovation; and Promoting AI adoption in public and private sectors. The above-mentioned national AI committee, under the National Digital Economy and Society Committee (NDESC), was established in August 2022, chaired by the prime minister. Comprehensive legislation Following the national AI strategy, the government has been developing comprehensive AI legislation to govern and promote AI
Read More