You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 7, 2020

Bank of Thailand Introduces Digital Personal Loans

Subscribe to Updates
Informed Counsel

With technological advancements, business operators are able to access more varieties of data than ever before, and are able to use that data to assess the terms on which loans are provided. This means that they can provide services to consumers more efficiently and with lower operating costs. More importantly, however, it allows them to provide financial services to a broader range of consumers who would otherwise not be able to access vital funds.

To facilitate this, on September 15, 2020, the Bank of Thailand (BOT) introduced a new type of personal loan—the digital personal loan—under BOT Circular Re: Rules, Procedures and Conditions for the Undertaking of Digital Personal Loan Business. Sometimes known as “quick loans” or “easy loans” in other jurisdictions, this new type of loan instrument is intended to promote Under the circular, a digital personal loan is defined as a personal loan for which business operators utilize digital technology and alternative data (e.g., utility and mobile phone bill payment records) to assess the borrower’s ability and willingness to repay. The digital personal loans do not include loans for which car registration is used as collateral.

The key requirements for undertaking a digital personal loan business are as follows:

  1. Business operators are expected to use technology and alternative data to determine the customer’s risk profile, based on their ability or willingness to repay. The alternative data that is used must be from a trusted source and use a sensible hypothesis in assessing the customer’s credit profile. Such business operators may comply with the BOT’s information-based lending guidelines.
  2. Business operators must use electronic channels for both the provision and repayment of the loans. This may include disbursing and repaying by bank transfer, direct debit, or e-money to create a digital footprint in the financial sector for the customers.
  3. Business operators must disclose relevant information to customers, including interest rates, fines, service fees, operating fees, outstanding loan tables, and any other fees relating to the Digital Personal Loan. This information must also be easily accessible for customers through electronic means (for example, by being hosted and easily accessible on the loan providers website).
  4. The maximum loan amount is THB 20,000 with a tenure of not more than six months.
  5. Business operators are prohibited from charging additional interest rates, fines, service fees, operating fees, or any other fees to customers for early repayment of a loan.
  6. Business operators are required to have IT security risk management measures in place. This includes measures to protect data from unlawful collection, processing, use, and destruction. Business operators also have an obligation to business continuity management, which they must satisfy by having a business continuity plan and an IT Disaster Recovery Plan. If the business operator will outsource their IT systems or connect their IT systems to third party services in a way that will involve the transfer of sensitive data (e.g. by using a cloud computing service), the third party must also have risk management and cybersecurity processes in place to the same standards.

Personal loan license holders that wish to offer digital personal loans must submit an application and supporting documents, including information on their minimum viable product, for BOT consideration at least 30 business days prior to the date on which they plan to begin offering digital personal loans. However, this application requirement is waived if the provision of digital personal loans only uses traditional methods of assessing customers’ ability or willingness to repay their loans (such as the National Credit Bureau).

Business operators who would like to issue digital personal loans but do not currently have a personal loan license must first apply for one from the BOT in accordance with the requirements of BOT Notification SorNorSor. 12/2563 Re: Regulations, Procedures and Conditions for Undertaking Business of Personal Loan under Supervision. In practice, these business operators may apply for a personal loan license and simultaneously apply for BOT approval of their plan to issue digital personal loans.

While digital personal loans look set to become a major offering in Thai consumer banking, they are also of particular interest to non-traditional loan operators—especially e-money operators, large-scale casual employers (such as ride-share operators and delivery services), and even retailers, as has been the case with similar “quick loan” systems in other jurisdictions.

Download Full Article
Related Professionals

Industries

Technology

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

September 24, 2024
On September 24, 2024, the government of Vietnam issued the first draft of a new Law on Personal Data Protection (“Draft PDPL”). As foreshadowed in our previous legal update, the Ministry of Public Security has been very active in developing this draft law. With this draft, they promise to continue their considerable efforts to establish a robust personal data protection culture in Vietnam, as the Draft PDPL indicates a tentative entry into force on January 1, 2026. With a tentative adoption by the National Assembly in May 2025, the Draft PDPL does not include any transition period, save for micro-enterprises, SMEs, and startups, which are only exempted from appointing a data protection department in their first two years of existence, while the timeline to comply with other obligations under the PDPL remains the same as for other enterprises. The Draft PDPL includes 68 articles, divided into seven chapters, making it more extensive than last year’s Decree No. 13/2023/ND-CP on Personal Data Protection (“PDPD”), and expressly addresses personal data protection in many fields, including marketing services, behavioral advertising, big-data processing, AI, cloud computing, labor monitoring and recruitment, financial and credit information, health and insurance, and others. It remains unclear how the PDPL will interact with the PDPD (whether it will replace its predecessor or coexist with it), although the Draft PDPL provides that it will prevail over any laws that have provisions on personal data protection that differ from the provisions of the PDPL. Among the important new developments of the Draft PDPL when compared to the PDPD, we note: Consent remains the main legal basis for processing, with limited exceptions (still not including “legitimate interest”). However, consent for cross-border transfer is further regulated under the Draft PDPL, including for intra-group sharing. Data processing impact assessment dossiers for controllers and
Read More
September 24, 2024
In recent years, Thailand has witnessed significant developments in its personal finance sector, particularly in alternative lending options. This article explores two key concepts in the Thai financial landscape: nano finance and personal loans. These alternative lending models, regulated by the Bank of Thailand (BOT), aim to provide more accessible financial services to individuals and small entrepreneurs who might have limited access to traditional funding sources. Nano Finance: Empowering Small Entrepreneurs The nano finance scheme under the BOT’s supervision is designed to provide funding to small entrepreneurs who might have limited access to traditional financial resources. One of the key features of this scheme is the ability of licensed nano finance providers to use alternative data in assessing loan applicants’ ability to repay (information-based lending). To implement this approach, nano finance providers must have an internal policy on credit approval that supports: Identifying scope and processes for utilizing alternative factors or technologies in determining debt repayment capacity, credit line limits for each loan applicant and total credit limits, and acceptable debt repayment targets; Having resources and personnel with sufficient knowledge, capability, experience, and expertise to operate efficiently and effectively, as well as clear checks and balances; Establishing guidelines for selecting and analyzing factors or financial models to evaluate or predict loan applicants’ ability and willingness to repay; Having an internal sandbox to test key success factors of the selected factors or models; and Having a process for monitoring and reviewing the application of the selected factors or models in assessing debt repayment capability. This approach allows nano finance providers to make more informed lending decisions based on a broader range of data, potentially increasing access to finance for small entrepreneurs who may not have traditional credit histories or collateral. Personal Loans The personal loan scheme under BOT supervision aims
Read More
September 20, 2024
On September 12, 2024, the Bank of Thailand (BOT) Notification Re: Virtual Bank Supervision Criteria took effect. According to this notification, virtual banks must adhere to standards for traditional commercial banks, along with additional requirements tailored to address virtual banks’ digital nature and corporate structure. Specific Requirements The concepts of supervision remain unchanged from the consultation paper titled “Criteria for Supervising Virtual Banks”. Some of the key additional provisions and details on supervision criteria relate to the following: Financial business groups: The notification identifies virtual banks as financial businesses, subject to the BOT’s regulations on financial business group supervision. If a virtual bank is a part of another financial institution’s financial business group, the virtual bank must be under a solo consolidated group. After the “initial phase” (see below), other financial institutions and companies within the financial business group are prohibited from extending credit to or engaging in transactions similar to lending activities with the virtual bank. Capital fund requirements: If other financial institutions’ investment in a virtual bank increases the capital fund in the financial system beyond a safe level and this poses a risk to other financial institutions, the BOT may order the relevant financial institution to maintain capital funds as the BOT deems appropriate. Service channels and outsourcing: Virtual banks must provide services solely through digital channels, except when necessary. For example, with the BOT’s approval, a virtual bank may use other commercial bank electronic branches via an ATM pool system, use a banking agent to serve customer needs for cash, or occasionally provide on-site services. Initial Phase The “initial phase” runs from the date that the virtual bank commences its operations until it receives the BOT’s approval to become fully operational. During this period, certain BOT supervisory requirements are relaxed as follows: Governance: Virtual banks in the initial phase may request
Read More
August 29, 2024
Thailand’s Securities and Exchange Commission (SEC) has revised its regulations on digital asset operators and exchanges to impose stricter governance standards on digital asset business operators and to align digital asset exchange rules with international standards. The new regulations are laid out in SEC Notification No. GorThor. 23/2567 on the Criteria, Conditions, and Procedures for Operating a Digital Asset Business (No. 24) and SEC Notification No. GorLorThor. 24/2567 on Determination of Prohibited Qualifications for Directors and Executives of Digital Asset Business Operators (No. 5). These were published in the Government Gazette on August 16, 2024, with most of the provisions taking effect on the same date. Governance for Digital Asset Businesses The heightened standards for digital asset business operators aim to ensure efficient business supervision and appropriate response to operational risks. The new requirements mainly address: Board of directors composition. Large-sized digital asset business operators (i.e., those with at least 10,000 customers and holding customer assets of at least THB 500 million) who do not provide digital asset custodian services must have at least five directors, at least two of whom must be independent directors. In addition, the business operators must establish an audit committee, with at least two members being independent directors, to create an appropriate “check and balance” mechanism within the organizational structure. Current digital asset business operators must comply with the requirements within 180 days of the notification’s effective date. Qualifications of authorized directors and managers. Authorized directors and managers are now required to (1) either have at least one year of working experience in the digital asset field or have participated in a digital asset course from an SEC-approved list, and (2) participate in a good corporate governance course recognized by the SEC. Current authorized directors and managers who have not previously completed a good
Read More