Thailand’s telecommunications regulator has introduced a range of new compliance obligations for telecom licensees aimed at preventing and suppressing technology crime. On May 15, 2026, the National Broadcasting and Telecommunications Commission (NBTC) published in the Government Gazette Notification on Measures for Prevention and Suppression of Technology Crime No. 2, which amends the original NBTC notification dated August 24, 2025. The amendment derives its authority from the Emergency Decree on Measures for Prevention and Suppression of Technology Crime B.E. 2566 (2023), as amended in 2025, and took effect on May 16, 2026. SIM Card Registration Cap for Non-Thai Nationals Persons without Thai nationality are now limited to a maximum of three SIM cards per person per service provider. Identity verification must be done primarily via passport. For those without a passport, acceptable alternatives include travel documents or certificates of identity issued by foreign governments, accompanied by additional Thai government-issued documents, as well as pink ID cards (for persons without Thai nationality) and white ID cards (for persons without registration status). Registration must be done in person at a branch or authorized dealer. Service providers must develop their identity verification systems and obtain NBTC approval before deployment. SIM Activation Deadline and SIM Box Prohibition Both Thai and non-Thai service users must activate their registered SIM within 60 days of registration. If they fail to do so, they must re-verify their identity in person before activation, confirming they are the same person who originally registered. Service providers must prohibit SIM box and gateway devices capable of supporting four or more SIMs from connecting to their mobile networks unless the device has received a license under the Radio Communications Act. Blacklist Enforcement Service providers must refuse registration of additional mobile numbers for persons listed on a technology crime-related database maintained by the Royal

Thailand’s rise as a regional hub for luxury retail has influenced how market entry is structured and assessed across Southeast Asia. As brands consider establishing a presence in the market, regulatory and operational considerations form a key part of the overall entry assessment. Foreign Ownership Restrictions for Retailers Foreign investment in retail activities is subject to a relatively extensive regulatory framework, particularly in relation to foreign ownership and the approvals required under the Foreign Business Act B.E. 2542 (1999) (FBA). Under the FBA, a company is generally regarded as foreign if 50% or more of its shares are held by non-Thai nationals, in which case the business is required to obtain a foreign business license (FBL) issued by the director-general of the Department of Business Development, with the approval of the Foreign Business Committee. The committee will not grant an FBL unless it is convinced the proposed business demonstrates unique characteristics such as a distinctive business model, innovative processes, specialized services or products, or a clear competitive differentiation that will benefit Thailand; constitutes a highly specialized business or requires specialized technology or expertise; and will not compete with Thai business operators who engage in the same business. The committee makes its decisions on a case-by-case basis depending on the circumstances, which can make the licensing process less predictable in practice. However, there are also alternative pathways for consideration, including exemptions in specific circumstances. For example, foreign-owned businesses in Thailand with at least THB 100 million in registered capital are allowed to open five retail stores in the country. Some businesses may also be able to access preferential treatment under international agreements and treaties between Thailand and certain foreign states, subject to eligibility requirements. Structural and Business Model Challenges The determination of what constitutes a “retail store” may itself present

Thailand has liberalized its wine import regime, allowing, for the first time, multiple importers to bring in and distribute the same wine brands. On March 27, 2026, the Ministry of Finance issued the Ministerial Regulation on the Importation of Alcoholic Beverages (No. 3) 2026, which waives the requirement to appoint a sole authorized agent for alcoholic beverages to be specified in notifications from the Excise Department. The Excise Department has already issued its first such notification, expressly exempting wine and sparkling wine made from grapes from the sole agent requirement. For all other types of alcoholic beverages (e.g., beer, tequila, spirits) the sole agent requirement remains in force, and applicants for importer licenses must provide evidence of exclusive distributorship issued by the manufacturer or brand owner. The exemption may be extended to other alcoholic beverage categories through future Excise Department notifications. Implications for Competition and Tourism The reform allows multiple importers to bring in and distribute the same wine brand without routing through the brand owner’s designated exclusive importer, reducing monopolization and boosting competition. Excise Department Director-General Pornchai Thirawet noted that wine was chosen as the starting point because implementation is straightforward in this case and because domestic wine prices remain high—with increased competition expected to exert downward pressure on prices. More broadly, the reform is intended to lower market entry barriers, expand supply, and make wine more accessible to Thai consumers, while supporting Thailand’s position as a regional tourism hub. Product Quality Control and Loss of Sole Agent Accountability Under the previous framework, the designated importer bore full responsibility for the proper storage, handling, and distribution of wine and sparkling wine from importation to final sale. This arrangement helped ensure that products were maintained under appropriate conditions, including temperature control, light exposure, and humidity management, to preserve quality

Thailand has introduced new requirements for online social media platforms to verify the identity of paying advertisers before publishing their advertisements. On May 5, 2026, the Electronic Transactions Commission published the Notification on Measures for Prevention of Technology Crime for Online Social Media (No. 2) in the Government Gazette. The notification, which aims to prevent technology crimes such as fraud and scams, takes effect 180 days after publication (i.e., on November 1, 2026). Mandatory Advertiser Identity Verification Online social media service providers must verify the identity of every advertiser before publishing an advertisement. Verification remains valid for up to one year from the most recent verification date. The notification requires social media providers to use either of the following methods when verifying advertisers: Document-based verification: Examine government-issued identity documents (e.g., national ID, passport, or juristic person registration certificate), cross-check the connection between the advertiser and the identity documents (e.g., facial comparison with photo ID), and ensure that the identity documents are verifiable against reliable sources. Digital identity verification: Use an identity verification system with a level of assurance no lower than that prescribed by the Electronic Transactions Commission. Advertiser Data Collection and Retention Service providers must collect and retain certain data—including name, identification number, and contact details—from the start of the advertising service and for a minimum of 90 days after the end of the advertising service relationship. The same requirements apply where there is a third-party payer, such as an ad agency. Implications for Affected Businesses The notification raises two key areas of concern for affected businesses: Social media platforms must implement know-your-advertiser (KYA) onboarding as described above, including document upload and identity matching processes. The 180-day implementation window requires immediate technical and operational planning. The collection and retention of national ID cards, passport copies, and other personal