You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 4, 2025

Online Pharmacies in Thailand: Insights for Entrepreneurs and Health-Tech Enthusiasts

Subscribe to Updates

With advancements in health technology, telemedicine has taken on a wider online presence in Thailand. Under the Medical Facility Act, licensed clinics and hospitals may now diagnose, prescribe, and issue electronic prescriptions during a video call, provided they maintain patient confidentiality and proper recordkeeping.

As a complementary concept, a telepharmacy allows a pharmacist to verify prescriptions, counsel patients, and dispense medication from a remote site. Hospitals, clinic chains, and some retail pharmacy groups have adopted “drive-thru” or “locker” pick-up points where drugs are bagged only after a real-time video consultation with a registered pharmacist.

The clear benefits of telehealth include shorter waiting times and broader access to specialists, which is in the public interest.

Drug Distribution and Advertising in Thailand

The online pharmacy ecosystem creates a legal bridge in that once a teleconsulting doctor issues an e-prescription, a licensed pharmacy can lawfully dispense and deliver the medicine prescribed to the patient’s door. Nonetheless, the critical compliance component remains the advertising of medicinal drugs. It is still not allowed to advertise prescription/pharmacy-dispensed drugs to the public in Thailand.

Although Thailand’s Drug Act of 1967 was written more than half a century ago, it still governs the trading of every medicinal drug that makes its way to consumers in Thailand—whether bought at a pharmacy or delivered with a few taps on a smartphone. First and foremost, the pharmacy must hold a license to sell medicinal drugs as a retailer. It is also mandatory that arrangements be made for a pharmacist to be on duty during opening hours.

Drugs are classified into three main categories: prescription drugs, pharmacy-dispensed drugs, and over-the-counter (OTC) drugs. The listing of OTC drugs with their prices via an online platform is allowed, as only OTC drugs may be advertised directly to the public. However, naming or showing a prescription drug or pharmacy-dispensed drug online—even without a price—is considered advertising and is thus prohibited unless directed solely at healthcare professionals. All drug advertisements, including social media posts, must be preapproved by the Thai Food and Drug Administration (FDA). Penalties for unlicensed ads can reach THB 100,000 per violation, and the FDA typically orders the advertiser to remove the unlicensed ad.

There have been precedent cases of the Thai FDA sending warning letters to certain e-commerce platforms claiming that they violated the drug-advertising provisions of the Drug Act, as they were considered accomplices in drug advertising. As a result, leading e-commerce and social media operators have tightened their standards by implementing policies that include not accepting drug ads on their platforms in Thailand, carrying out robust takedown processes, and introducing seller-verification programs.

Entrepreneurs and e-commerce platforms should verify any advertising claims and be skeptical of treatments that tout the curing of diseases or that use language hyping “miracle” drug properties, as these are classic hyperbole tools used in drug advertising via online platforms.

According to a Thai FDA report, more than 85 percent of drug ads circulating online violate the law. Health-tech and online platforms are continually dealing with the hectic pace of unlicensed ads, as algorithms on their platforms struggle to spot every rogue video or “flash sale” post, but regulators have not stood still. Some of the recent enforcement and oversight trends include:

  • Surprise raids on fulfillment warehouses linked to unlawful online sellers.
  • FDA press releases that list noncompliant websites and social media pages.
  • Collaboration with e-commerce platforms to remove listings flagged by the FDA.

Compliance Outlook

The advertising of medicines in Thailand is heavily regulated under the rulebook of the Thai FDA. Obtaining approval to advertise medicine can be a major obstacle to online pharmacies hoping to expand their market in Thailand. Nonetheless, by embracing telemedicine and telepharmacy guidelines, together with staying alert to advertising pitfalls, Thailand’s digital health market can take advantage of increased public participation in this emerging medicine pathway while protecting patient safety.

Related Professionals

Industries

Life Sciences

Technology

Practices

Regulatory Affairs

Location

RELATED INSIGHTS​ 

July 20, 2026
On July 16, 2026, Thailand’s Personal Data Protection Committee (PDPC) published a notification in the Government Gazette establishing detailed rules governing data subjects’ right of access under section 30 of the Personal Data Protection Act B.E. 2562 (2019) (PDPA). The notification will take effect 60 days after publication—mid-September 2026—giving data controllers a limited window to bring their processes into compliance. Scope The notification covers requests to access or obtain copies of personal data and requests for disclosure of the source of data collected without consent. Data subjects may exercise their rights directly or through authorized representatives. Key Requirements Important requirements set by the notification include the following: Required request channels. Controllers must provide at least two request channels: direct submission at the business location and registered mail. Electronic channels are optional but, if offered, may also be used for fulfilling requests. Request contents. Requests must be in writing or in electronic form and include the data subject’s name, the preferred access method, details of the data requested, and the requester’s signature. Controllers may request additional identifying information as needed. Identity and authority verification. Controllers may require official identity documents for verification. Authorized representatives must provide authorization documents and identity documents for both the data subject and the representative. Alternative verification methods (e.g., digital authentication) are permitted if they do not unreasonably obstruct data subjects’ rights. Review and response timelines. Controllers must review requests within 15 days. If the request is incomplete, the controller must notify the requester and allow at least 15 days to correct deficiencies. If not corrected, the request may be treated as abandoned. Once verified, controllers must fulfill requests within 30 days, extendable by another 30 days for large-volume or complex requests with notice to the requester. Methods for providing access or copies. Controllers may fulfill
Read More
July 16, 2026
Thailand’s Office of the Personal Data Protection Committee (PDPC) published a series of draft guidance documents for public consultation on July 7, 2026. Issued under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the drafts address a range of compliance issues and offer insight into the regulator’s current enforcement priorities. This article examines two of those drafts: one on lawful bases for processing personal data, and another on marketing and direct marketing. Together, they reflect the Office of the PDPC’s evolving expectations on lawful-basis selection, accountability, and the use of personal data in marketing. Organizations operating in Thailand should assess the practical implications now, before the guidance is finalized. Lawful Bases: A Structured Selection Process The draft guidance on lawful bases introduces a systematic five-step process for selecting an appropriate lawful basis for each processing activity. Organizations are expected to: Identify the processing activity involved. Assess the appropriate lawful basis. Evaluate whether the data is necessary for the processing. Conduct a legitimate interest assessment (LIA) where applicable. Ensure transparency through privacy notices. The guidance provides practical explanations and examples for each lawful basis under section 24 of the PDPA—including archiving, research, statistics, vital interests, contractual necessity, legal obligation, public task, legitimate interests, and consent—as well as the bases applicable to sensitive personal data under section 26. The aim is to promote more consistent and accurate lawful-basis selection across public- and private-sector organizations. A recurring theme throughout the guidance is that organizations should select the lawful basis that most accurately reflects the actual purpose and circumstances of the processing activity. The guidance cautions against treating consent as a default or catch-all basis where another lawful basis is more appropriate. For processing based on legitimate interests, organizations should conduct and document an LIA. Processing involving sensitive personal data may require
Read More
July 14, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published guidelines establishing a risk-based framework for the responsible use of artificial intelligence by telecom licensees. Released on July 2, 2026, the Guidelines on the Use of Artificial Intelligence for Telecommunications Services address governance structures, ethical principles, lifecycle management, and consumer protection obligations. Scope and Legal Context The nonbinding guidelines apply to holders of telecom business licenses under Thailand’s telecom licensing laws, but only with respect to the use of AI in providing licensed telecom services. Entities without such licenses are not directly subject to the guidelines, though they may be affected as third-party AI solution providers to licensees. The guidelines supplement and should be read alongside existing laws, including the Cybersecurity Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and the NBTC Notification regarding Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications, as well as forthcoming AI governance legislation being drafted by the ETDA. AI Governance Structure Licensees are expected to establish committees, working groups, or designated officers at both policy and operational levels to set strategic direction for AI use, formulate governance policies and tools, and oversee risk management. Roles, responsibilities, and accountability should be clearly defined for all personnel across every stage of the AI lifecycle—including for third-party AI solution providers and outsourced service providers, whose obligations should be explicitly documented in service agreements. Core Principles The guidelines identify six core principles that licensees should adhere to when deploying AI: Compliance with laws, ethics, and international standards: AI should respect privacy, dignity, and human rights, and content filtering for inputs and outputs should be considered. For example, the AI should not be designed and developed to be used in generating false information, supporting illegal activities, or causing
Read More
July 13, 2026
Indonesia’s Halal Product Assurance Agency (BPJPH) has issued new regulations establishing clearer procedures for imposing administrative sanctions on businesses that violate halal product assurance requirements. BPJPH Regulation No. 2 of 2026 on the Imposition of Administrative Sanctions for Violations of Halal Product Assurance Implementation, issued on June 5, 2026, strengthens Indonesia’s halal compliance framework, as mandated under Law No. 33 of 2014 on Halal Product Assurance and Government Regulation No. 42 of 2024 on the Implementation of Halal Product Assurance. BPJPH Regulation No. 2/2026 also supports the upcoming mandatory halal compliance deadline of October 17, 2026, which will apply to a broad range of products and services, including imported food and beverages, slaughtering products and services, natural and quasi-drugs, health supplements, cosmetics, chemical and genetically engineered products, clothing and accessories, household goods, prayer equipment, stationery, and class A medical devices. Scope BPJPH is authorized to impose administrative sanctions for violations of halal product assurance requirements committed by businesses, halal inspection agencies (LPH), halal auditors, halal product process companion institutions (lembaga pendamping PPH), and halal product process companions (pendamping PPH). The head of BPJPH has authority to determine, cancel, or amend the imposition of administrative sanctions, including upon receipt of objections. This authority covers revocation of Halal Certificates (including foreign halal certificate registration numbers), withdrawal of goods from circulation, freezing of LPH operations, freezing of halal product process companion institutions, revocation of PPH companion institution registration numbers, revocation of halal auditor registration numbers, and revocation of LPH accreditation status. Administrative Sanctions Businesses may be subject to any of the following administrative sanctions: Written warning; Administrative fine; Revocation of the halal certificate, including revocation of foreign halal certificate registration numbers; and Withdrawal of goods from circulation. The regulation sets out the types of violations that may trigger these sanctions, with each
Read More