Thailand’s Personal Data Protection Act (PDPA) enforcement has entered a new phase, and the insurance industry is squarely in the regulatory spotlight. The Personal Data Protection Committee (PDPC) considers insurers “large-scale” processors of sensitive data—including health records, financial information, and biometric data—making the sector a focal point for enforcement action. In August 2025 alone, the PDPC issued administrative fines totaling THB 21.5 million, and fines for individual violations have ranged from THB 50,000 to THB 2 million. The PDPC has also deployed its “Eagle Eye Crawler,” an AI-driven surveillance tool that monitors websites around the clock for data leaks and noncompliant privacy notices. This article highlights the key regulatory developments directly affecting insurers and outlines practical steps toward compliance. What Has Changed: OIC and PDPC Alignment The Office of Insurance Commission (OIC) has synchronized its sector-specific rules with the PDPA through the Notification on Customer Personal Data Protection (No. 2) B.E. 2568 (2025). The combined effect of the PDPC’s general enforcement push and the OIC’s sectoral guidance creates four critical compliance areas for insurers. Consent unbundling. Consent for marketing must be strictly separated from the core insurance contract; bundling marketing consent into the policy application is no longer permissible. Agent and intermediary oversight. Insurance intermediaries are generally classified as data processors, meaning that insurers—as data controllers—must provide specific written instructions and security protocols to all agents and brokers. A 2026 enforcement trend shows controllers being held liable for the “weak security” of their vendors and downstream processors. Enhanced privacy notices. Insurers must provide a summary privacy notice alongside the full policy, plainly stating categories of data, purposes, lawful bases, disclosure recipients, cross-border transfers, retention periods, data subject rights, and easy marketing opt-out channels. DPO registration and ROPA. All organizations involved in “regular or systematic monitoring of data subjects on

On March 30, 2026, Thailand’s Customs Department announced a strategy to raise import duties on a broad range of consumer goods—including plastic items and electronics accessories—to their maximum statutory ceilings, which often sit at 30% or 40%. Many of these goods currently benefit from promotional or incentive rates as low as 5%. For importers, e-commerce platforms, and logistics providers, this development demands immediate attention. While these increases generally require cabinet approval, they do not require full parliamentary amendment of the Customs Tariff Decree B.E. 2530, as the Customs director-general and the finance minister hold delegated authority to adjust rates within existing statutory bounds. Businesses should not assume that the legislative process will provide significant lead time before higher rates take effect. Death of the De Minimis: Abolishing the THB 1,500 Loophole This “ceiling-rate” policy, which is designed to equalize the landed cost of foreign goods with the domestic production costs of Thai manufacturers, builds on a sweeping set of customs reforms that have already begun to reshape Thailand’s trade environment. The foundation of this new regime was laid on January 1, 2026, when Thailand formally abolished the longstanding THB 1,500 duty exemption for small imported parcels under Customs Notification No. 219/2568. Every imported item is now subject to VAT and applicable import duties for its declared value, regardless of parcel size or transaction amount. By narrowing the scope of exemptions previously granted to low-value goods under the Customs Tariff Decree B.E. 2530, the government has made clear that the era of tax-free cross-border micro-imports is over. Three-Phased Strategy and Legal Modernization The March 30 announcement is the second phase of a three-part regulatory roadmap: Immediate enforcement: The removal of the THB 1,500 loophole and the imposition of VAT on all parcels, effective January 1, 2026. Tariff realignment: The current

Thailand’s Office of the Consumer Protection Board has opened a public hearing period on draft regulations governing the transfer of direct sales and direct marketing businesses. The draft Notification of the Direct Sales and Direct Marketing Committee: Criteria and Procedures for Business Transfer and Amendment of Registration for Direct Sales or Direct Marketing Businesses establishes a compliance-focused process with strict documentation requirements and timelines for transferring direct sales and direct marketing businesses. The proposed framework also defines the roles of transferors and transferees and establishes application procedures with the Office of the Consumer Protection Board. Applications may be submitted in person or electronically and will be examined to confirm they are complete, authentic, and compliant with legal requirements. This includes verification that: The transferee meets all required qualifications; No disqualifying factors apply; and The applicant is not subject to legal restrictions. The public hearing period is open until April 29, 2026. Direct sales and direct marketing business operators should prepare for these proposed requirements to ensure compliant implementation once the regulations are finalized.

In response to an emerging crisis on food safety, the government of Vietnam promulgated Decree No. 46/2026/ND-CP (Decree 46) on January 26, 2026, and Resolution No. 66.13/2026/NQ-CP (Resolution 66.13) on January 27, 2026, setting out a number of substantive changes to the procedure and strict requirements for the declaration, registration, and importation of food products. Both instruments took effect upon issuance. However, shortly after they entered into force, food businesses encountered significant implementation challenges, particularly with respect to state inspection procedures at the customs clearance stage for imported products. In response, the government issued Resolution No. 09/2026/NQ-CP (Resolution 09) on February 4, 2026, temporarily suspending Decree 46 and Resolution 66.13 until a new effective date of April 16, 2026. Continued Suspension of Implementation of Decree 46 and Resolution 66.13 After considering feedback gathered by the Ministry of Health from food businesses and other stakeholders during the suspension period, the Vietnam Government Office issued a notice on March 20, 2026, agreeing to extend the suspension until the issuance of an amended Law on Food Safety and its guiding decree. Following this notice, on March 22, 2026, the Ministry of Health prepared a draft resolution to implement the notice and replace Resolution 09. Under the draft resolution, the effectiveness of Decree 46 and Resolution No. 66.13 would continue to be suspended until the amended Law on Food Safety takes effect, except for the provisions under Resolution 66.13 allowing flexibility in documents evidencing product efficacy, which would take effect on April 16, 2026, and remain effective until the Law on Food Safety is replaced (but not later than February 28, 2027). Accordingly, for products subject to the registration declaration procedure, such as health supplements, efficacy may be substantiated by either (i) scientific evidence supporting the declared function and effects of the product