You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

February 3, 2017

Copyright Protection in Virtual Reality

Informed Counsel

Virtual reality (VR) describes a computer-generated simulation of a three-dimensional (3D) space, which allows users to feel as if they are exploring a physical environment. To achieve this effect, a user wears a headset that performs the dual functions of displaying the 3D images and blocking out physical reality. By tracking the movements of the user’s head, the displayed images may be adjusted to create the sense of being able to view an environment in 360 degrees.

The year 2016 was a watershed moment for virtual reality due to the release of several new VR systems for consumer purchase. Ranging from high-end systems, such as Oculus Rift, to inexpensive cardboard headsets designed to work with smartphones, there are now multiple options available for those interested in experiencing virtual reality firsthand.

While the rise of virtual reality thus far has been driven mostly by video games—exemplified by the recent release of the PlayStation VR headset—the investments currently being made by prominent tech companies signal that virtual reality will soon change the way we surf the Internet and engage with social media.

In addition, creative programs like Tilt Brush already offer artists new and unique ways to create genre-defying works in VR environments. As VR tools continue to improve and the number of VR adopters increases, there will be a marked proliferation of creative works in the VR context. For example, the Internet platform Second Life is a virtual world in which users explore and interact using avatars. Second Life has its own internal currency and a large market for “in-world” digital goods, including real estate, artwork, avatar clothing, and even pets. Strong protection for VR works will ensure that creators are incentivized to innovate in this new area.

This article discusses the applicability of copyright to virtual reality and some of the novel issues presented by intellectual property protection of VR works.

Copyright Protection

While virtual reality is still in its infant stages, artists are already finding that creating works in a virtual 3D space allows them to do things that were previously impossible. Virtual reality allows artists to “paint” using color and light, and incorporate motion and sound to create three-dimensional works that appear to float in the air. These creations defy categorization because they may combine elements of illustration, sculpture, music, and cinematography. In addition, the VR context allows users to interact with works in ways not possible in physical reality, such as by walking through an object to examine multiple layers.

The Thai Copyright Act B.E. 2537 (1994) was designed to be adaptable so that it could encompass new types of works. However, the Act does not explicitly provide for protection of creative works in virtual reality, which raises the question of whether such works are protected under copyright.

Section 6 of the Copyright Act specifies that a “[c]opyright work under this Act means a work of authorship in the form of a literary, dramatic, artistic, musical, audiovisual, cinematographic, sound recording, sound and video broadcasting work or any other work in the literary, scientific or artistic field whatever the mode or form of  its expression” (emphasis added).

The above language demonstrates that the Copyright Act is not limited to the technologies that were in existence at the time of drafting. As long as a new work can be classified as part of the literary, scientific, or artistic fields, and the work satisfies the other requirements of the Act, it will be protectable by copyright. Further, Thailand protects software under copyright law as a literary work. As VR works are represented by software, they will be protected by copyright regardless of the form they take.

While works are automatically protected by copyright upon their creation, rights holders should undertake recordation of their works with Thailand’s Department of Intellectual Property to establish prima facie evidence of copyright ownership and subsistence in the event they need to take legal action against an infringer.

Infringement

Copyright provides an associated bundle of exclusive rights for copyright owners, such as the right to reproduce, rent, assign, license, communicate to the public, and create adaptations or derivative works. Because VR works are protected under copyright, other parties may not make the above uses of a work without the permission of the copyright owner. The flip side of this is that a VR reproduction of a real-world work will also be considered infringement as a derivative work.

While we are still in the early days of virtual reality adoption, VR platforms should create clear Terms of Service stating that users may not use the platform to infringe the intellectual property rights of other parties. Users who violate these terms by creating infringing content may be blocked or removed from the service.

As adoption of virtual reality grows, VR platforms will also need to be protected against infringing uses of their services, much as user-generated content sites are today. If VR platforms allow users to interact with one another in virtual space via the Internet, VR platforms will fall under the broad definition of internet service providers (ISPs) found in the Copyright Act. Section 32/3 of the Copyright Act grants immunity to ISPs against infringing content placed on their services by other parties, provided that they comply with court orders to remove such content. This immunity should encourage VR platforms to allow robust innovation by their users without fear of being held liable for any infringing activity their users may undertake.

Enforcement

The intangible nature of VR works will make enforcement against infringing uses difficult, just as the Internet has presented numerous challenges for creators seeking to enforce their IP rights against online infringers. Jurisdiction over VR disputes will likely be tested early, and courts will have to determine whether to make jurisdiction dependent on the location of the creator, infringer, infringement, or servers hosting the virtual reality. These locations may be on opposite sides of the world, and each one will create different enforcement issues.

VR platforms can assist content owners by creating internal notification and removal procedures for infringing content. Creating these internal procedures will demonstrate the goodwill of the VR platform and encourage content creators to participate in virtual reality. Additionally, by creating dependable methods for removal of infringing content, content owners may protect their works while avoiding costly and lengthy litigation.

Outlook

Due to its ability to create the impression of visiting new worlds, virtual reality has the potential to transform areas as disparate as entertainment, education, and tourism. While we cannot predict the path that virtual reality will eventually take, the innovative ways that virtual reality is already being used demonstrate that new markets for creative VR works will continue to proliferate. VR works need to receive strong protection under intellectual property laws in order to encourage creators to adopt virtual reality as their medium of choice.

RELATED INSIGHTS​ 

July 20, 2026
On July 16, 2026, Thailand’s Personal Data Protection Committee (PDPC) published a notification in the Government Gazette establishing detailed rules governing data subjects’ right of access under section 30 of the Personal Data Protection Act B.E. 2562 (2019) (PDPA). The notification will take effect 60 days after publication—mid-September 2026—giving data controllers a limited window to bring their processes into compliance. Scope The notification covers requests to access or obtain copies of personal data and requests for disclosure of the source of data collected without consent. Data subjects may exercise their rights directly or through authorized representatives. Key Requirements Important requirements set by the notification include the following: Required request channels. Controllers must provide at least two request channels: direct submission at the business location and registered mail. Electronic channels are optional but, if offered, may also be used for fulfilling requests. Request contents. Requests must be in writing or in electronic form and include the data subject’s name, the preferred access method, details of the data requested, and the requester’s signature. Controllers may request additional identifying information as needed. Identity and authority verification. Controllers may require official identity documents for verification. Authorized representatives must provide authorization documents and identity documents for both the data subject and the representative. Alternative verification methods (e.g., digital authentication) are permitted if they do not unreasonably obstruct data subjects’ rights. Review and response timelines. Controllers must review requests within 15 days. If the request is incomplete, the controller must notify the requester and allow at least 15 days to correct deficiencies. If not corrected, the request may be treated as abandoned. Once verified, controllers must fulfill requests within 30 days, extendable by another 30 days for large-volume or complex requests with notice to the requester. Methods for providing access or copies. Controllers may fulfill
July 16, 2026
Thailand’s Office of the Personal Data Protection Committee (PDPC) published a series of draft guidance documents for public consultation on July 7, 2026. Issued under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the drafts address a range of compliance issues and offer insight into the regulator’s current enforcement priorities. This article examines two of those drafts: one on lawful bases for processing personal data, and another on marketing and direct marketing. Together, they reflect the Office of the PDPC’s evolving expectations on lawful-basis selection, accountability, and the use of personal data in marketing. Organizations operating in Thailand should assess the practical implications now, before the guidance is finalized. Lawful Bases: A Structured Selection Process The draft guidance on lawful bases introduces a systematic five-step process for selecting an appropriate lawful basis for each processing activity. Organizations are expected to: Identify the processing activity involved. Assess the appropriate lawful basis. Evaluate whether the data is necessary for the processing. Conduct a legitimate interest assessment (LIA) where applicable. Ensure transparency through privacy notices. The guidance provides practical explanations and examples for each lawful basis under section 24 of the PDPA—including archiving, research, statistics, vital interests, contractual necessity, legal obligation, public task, legitimate interests, and consent—as well as the bases applicable to sensitive personal data under section 26. The aim is to promote more consistent and accurate lawful-basis selection across public- and private-sector organizations. A recurring theme throughout the guidance is that organizations should select the lawful basis that most accurately reflects the actual purpose and circumstances of the processing activity. The guidance cautions against treating consent as a default or catch-all basis where another lawful basis is more appropriate. For processing based on legitimate interests, organizations should conduct and document an LIA. Processing involving sensitive personal data may require
July 14, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published guidelines establishing a risk-based framework for the responsible use of artificial intelligence by telecom licensees. Released on July 2, 2026, the Guidelines on the Use of Artificial Intelligence for Telecommunications Services address governance structures, ethical principles, lifecycle management, and consumer protection obligations. Scope and Legal Context The nonbinding guidelines apply to holders of telecom business licenses under Thailand’s telecom licensing laws, but only with respect to the use of AI in providing licensed telecom services. Entities without such licenses are not directly subject to the guidelines, though they may be affected as third-party AI solution providers to licensees. The guidelines supplement and should be read alongside existing laws, including the Cybersecurity Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and the NBTC Notification regarding Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications, as well as forthcoming AI governance legislation being drafted by the ETDA. AI Governance Structure Licensees are expected to establish committees, working groups, or designated officers at both policy and operational levels to set strategic direction for AI use, formulate governance policies and tools, and oversee risk management. Roles, responsibilities, and accountability should be clearly defined for all personnel across every stage of the AI lifecycle—including for third-party AI solution providers and outsourced service providers, whose obligations should be explicitly documented in service agreements. Core Principles The guidelines identify six core principles that licensees should adhere to when deploying AI: Compliance with laws, ethics, and international standards: AI should respect privacy, dignity, and human rights, and content filtering for inputs and outputs should be considered. For example, the AI should not be designed and developed to be used in generating false information, supporting illegal activities, or causing
July 10, 2026
Vietnam has taken a significant step in regulating its e-commerce sector with the issuance of a new decree guiding the country’s recently enacted Law on E-Commerce. Decree No. 248/2026/ND-CP, issued on June 30, 2026, and taking effect the following day, addresses mandatory platform policies, registration requirements for offshore platforms, additional obligations on platform operators, and market access conditions for foreign investors. Mandatory Policy Contents The decree sets out detailed guidance on the required contents of various platform policies, covering pricing, payment, display priority, livestream sales, delivery, returns, method of service provision, and service termination and refunds. Clarification of Obligations for Platform Operators The decree provides clarification of the obligations applicable to platform operators. Notably, intermediary e-commerce platform operators with online ordering functions must: Collect specific information to implement electronic identity verification of sellers; Cooperate with regulators by reporting online through the state e-commerce management system and by blocking, suspending, or removing content upon request of a competent authority; Maintain a mechanism to store contract data, including price, product or service information, and parties’ information, for at least three years from the date of contract conclusion; and If qualifying as a “large digital platform” under consumer protection law, maintain an online system for receiving and handling complaints and requests, and comply with enhanced content-removal requirements. Registration Requirements for Offshore Platforms Offshore e-commerce platforms, whether direct-sales, intermediary, social-network-based, or integrated, that conduct e-commerce activity in Vietnam must register with the Ministry of Industry and Trade if the platform: Allows Vietnamese-language selection; Uses a “.vn” domain; or Reaches 100,000 or more transactions with Vietnam-based buyers within a calendar year. Notably, the registration requirement now captures not only traditional intermediary platforms, but also direct-sales platforms. Foreign Investment Conditions Foreign investors holding a controlling interest in an intermediary e-commerce platform, a social media platform