You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 6, 2019

The Compliance Framework for Online Content in Thailand

Informed Counsel

With the growing power and influence wielded by online content, concerns have been raised in Thailand (as in many other countries) that online channels, which facilitate free and easy exchange of information across a variety of forums, could be used to conduct illegal activities that will incite discontent and conflict within the country. This is especially true of information exchanged and shared through social media and Over-the-Top (OTT) services.    

In a bid to exercise a degree of control over online content, a number of laws and regulations have been prescribed focusing specifically on types of information that should be restricted, or prohibited, from being disseminated online. The following is an overview of Thai laws and regulations relating to online content.

Computer Crimes Act    

The Computer Crimes Act (CCA) is used by the government as a tool to control, restrict, and prohibit the dissemination of specific information by computer. The CCA also authorizes authorities to monitor internet traffic and suppress content that falls within the scope of the following criteria:

  • Distorted, false, or partially false content which is likely to cause damage to the general public with malicious intent.
  • False content which is likely to cause damage to national security, public safety, national economic stability, or infrastructure for the public benefit, or cause panic to the general public.
  • Content that constitutes a criminal offense relating to national security or terrorism, the royal family, or relationships with foreign nations, as prescribed under the Penal Code.
  • Content that constitutes a criminal offense under the laws relating to intellectual property.
  • Content which, by itself, is contrary to Thai public order or good morals.
  • Obscene or pornographic content.
  • Computer data or emails which could be regarded as a disturbance to the recipients, wherein there is no option for them to easily opt out or unsubscribe.

The provisions of the CCA also provide enforcement measures aimed at tackling intellectual infringement through online platforms. These measures provide the possibility of imposing a permanent injunction, which allows for the suspension or blocking of websites that contain content, or disseminate any data, that is deemed to infringe intellectual property. The provisions also allow for the removal of such data from computer systems. 

Child Protection Act     .

The Child Protection Act prohibits the dissemination of any information relating to a child with the intention of causing damage to the mind, reputation, prestige, or any other interests of that child, or which seeks benefit for oneself or others in an unlawful manner.

Copyright Act   

With millions of people spending an increasing proportion of their time online in order to enjoy online content and services, several types of infringing digital content (e.g., movies, songs, or games) can easily be illegally disseminated and consumed through online platforms, increasing the risk of copyright infringements. Notably, an amendment to the Copyright Act that came into force in 2015 provides alternative relief for copyright infringement in the form of a preliminary injunction, allowing the injured parties to have infringing content removed from the internet.

NCPO Orders   

In addition to these attempts to curb widespread distribution of unregulated online content, Thailand’s interim government, the National Council for Peace and Order (NCPO), has attempted to exert additional controls over digital rights by imposing extensive prohibitions on the dissemination and broadcasting of information via various forms of media.   

These NCPO orders empower authorities to prohibit the dissemination and broadcasting of any information that falls within the confines of the following criteria:

  • False content that could cause defamation or have a negative impact on the royal family.
  • News or information that could be harmful to national security.
  • Criticism of the NCPO’s operation which is provided in bad faith, or any false information that could impair the NCPO’s credibility.
  • Voices, photos, and videos relating to the confidential operation of government agencies.
  • Information which could cause controversy or polarization within the country.
  • Information that invites people, or leads to the assembly of people, in order to oppose NPCO officials, or people associated with the NCPO.
  • A threat to commit an act of violence against other people, or which causes panic or fear among the general public.

On top of these extensive restrictions, the NCPO orders also further prohibit individuals and media from inviting academics, or former civil servants, for interviews or to express opinions that are deemed to be in a manner that could exacerbate conflicts, or which distort information and cause confusion amongst the public.

Moving Forward   

The extensive restrictions and prohibitions cited above have not been initiated without concerns being raised in some quarters, and there is consternation that the drive to enforce the law could also result in a reduction in individual rights to freedom of expression.    

Therefore, finding a balance and suitable resolutions for these issues appears to be a crucial challenge for Thailand’s regulatory authorities, and ultimately, the country’s next government, which will come to power after the widely anticipated elections are held in March 2019. In the meantime, and whatever the outcome, it is imperative that both individuals and corporations understand the laws relating to online content, and exercise caution when engaging in any online transactions or businesses, in order to mitigate their exposure to potential penalties that may be imposed for transgressions.

RELATED INSIGHTS​ 

May 25, 2026
Thailand published new rules on May 1, 2026, establishing clear procedures for how the Anti-Money Laundering Office (AMLO) handles digital assets seized during criminal and money laundering investigations. Taking effect the following day, the Regulation of the Anti-Money Laundering Board on the Custody and Management of Seized or Frozen Assets (No. 3) B.E. 2569 applies to digital asset businesses, cryptocurrency holders, and anyone subject to asset seizure under Thailand’s anti-money laundering laws. For the first time, authorities now have a detailed roadmap for transferring seized digital property from private or foreign control into secure state custody. Digital asset businesses holding customer assets under investigation must be prepared to comply with these rules compelling repatriation of such assets in enforcement actions. Expanded Definition of Digital Assets The regulation defines digital assets to include not only those covered by Thailand’s existing digital asset business law but also any other property that can be stored using the same methods as digital assets. This broad formulation means the custody rules will apply to emerging blockchain-based assets and tokenized property that may not yet fall within the statutory definition of a digital asset business, giving authorities flexibility as the technology evolves. Mandatory Transfer to Domestic Custody When digital assets are held with service providers outside Thailand, AMLO will first attempt to transfer them to an account the office maintains with a licensed domestic digital asset business operator. If the domestic operator does not support that particular asset, the office will instead move the assets to its own cold wallet (offline, internet-isolated storage system). If neither option is feasible, the seizing official will report the situation to the Anti-Money Laundering Committee for alternative instructions. A similar hierarchy governs assets held in an accused party’s private wallet or by any third party that is not a
May 22, 2026
On May 8, 2026, the Thai government held a press conference to announce a coordinated, multiagency initiative to strengthen oversight and enforcement over products sold on online platforms. The initiative involves the Office of the Consumer Protection Board, the Thai Industrial Standards Institute, the Electronic Transactions Development Agency, the Thailand Consumers Council, the Consumer Protection Police Division, and major online platform operators. With this appointment, the government has signaled a deliberate shift from a predominantly reactive enforcement framework toward a more proactive regulatory and monitoring approach for online commerce and digital platform services. Legal and Regulatory Reform The government is accelerating a proposed Product Liability Law that would introduce new statutory frameworks for defective or substandard products, along with amendments to food safety and consumer protection legislation. The draft law has already been approved by the cabinet; the Council of State and relevant authorities will further draft the law and subsequently issue it for public hearings prior to enactment. Authorities also plan to expand enforcement measures against noncompliant businesses and distributors. In particular: The implementation of stricter “know your merchant” (KYM) identity verification requirements for online sellers. Expanded mandatory standards and regulatory oversight for high-risk products, such as power banks, electrical appliances, food products, and household goods. Increased monitoring of online product listings, and coordination with platform operators to remove unsafe, counterfeit, misleading, or otherwise noncompliant products. Additional monitoring and enforcement measures targeting online scams and illegal goods distributed through digital platforms, including e-cigarettes, which authorities identified as a growing concern due to increasing online distribution channels and potential health impact on young consumers. Strengthening Consumer Complaint Mechanisms The government announced increased cooperation with the Thailand Consumers Council and other agencies to facilitate complaint handling, market monitoring, and policy recommendations. Enhanced interagency coordination will aim to ensure that consumer
May 19, 2026
Thailand’s telecommunications regulator has introduced a range of new compliance obligations for telecom licensees aimed at preventing and suppressing technology crime. On May 15, 2026, the National Broadcasting and Telecommunications Commission (NBTC) published in the Government Gazette Notification on Measures for Prevention and Suppression of Technology Crime No. 2, which amends the original NBTC notification dated August 24, 2025. The amendment derives its authority from the Emergency Decree on Measures for Prevention and Suppression of Technology Crime B.E. 2566 (2023), as amended in 2025, and took effect on May 16, 2026. SIM Card Registration Cap for Non-Thai Nationals Persons without Thai nationality are now limited to a maximum of three SIM cards per person per service provider. Identity verification must be done primarily via passport. For those without a passport, acceptable alternatives include travel documents or certificates of identity issued by foreign governments, accompanied by additional Thai government-issued documents, as well as pink ID cards (for persons without Thai nationality) and white ID cards (for persons without registration status). Registration must be done in person at a branch or authorized dealer. Service providers must develop their identity verification systems and obtain NBTC approval before deployment. SIM Activation Deadline and SIM Box Prohibition Both Thai and non-Thai service users must activate their registered SIM within 60 days of registration. If they fail to do so, they must re-verify their identity in person before activation, confirming they are the same person who originally registered. Service providers must prohibit SIM box and gateway devices capable of supporting four or more SIMs from connecting to their mobile networks unless the device has received a license under the Radio Communications Act. Blacklist Enforcement Service providers must refuse registration of additional mobile numbers for persons listed on a technology crime-related database maintained by the Royal
May 6, 2026
Thailand has introduced new requirements for online social media platforms to verify the identity of paying advertisers before publishing their advertisements. On May 5, 2026, the Electronic Transactions Commission published the Notification on Measures for Prevention of Technology Crime for Online Social Media (No. 2) in the Government Gazette. The notification, which aims to prevent technology crimes such as fraud and scams, takes effect 180 days after publication (i.e., on November 1, 2026). Mandatory Advertiser Identity Verification Online social media service providers must verify the identity of every advertiser before publishing an advertisement. Verification remains valid for up to one year from the most recent verification date. The notification requires social media providers to use either of the following methods when verifying advertisers: Document-based verification: Examine government-issued identity documents (e.g., national ID, passport, or juristic person registration certificate), cross-check the connection between the advertiser and the identity documents (e.g., facial comparison with photo ID), and ensure that the identity documents are verifiable against reliable sources. Digital identity verification: Use an identity verification system with a level of assurance no lower than that prescribed by the Electronic Transactions Commission. Advertiser Data Collection and Retention Service providers must collect and retain certain data—including name, identification number, and contact details—from the start of the advertising service and for a minimum of 90 days after the end of the advertising service relationship. The same requirements apply where there is a third-party payer, such as an ad agency. Implications for Affected Businesses The notification raises two key areas of concern for affected businesses: Social media platforms must implement know-your-advertiser (KYA) onboarding as described above, including document upload and identity matching processes. The 180-day implementation window requires immediate technical and operational planning. The collection and retention of national ID cards, passport copies, and other personal