You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

April 4, 2017

Thailand: E-Insurance Regulations Issued – Effective August 2017

Subscribe to Updates

Thailand’s Office of Insurance Commission (OIC) has issued new notifications concerning the criteria, procedures, and conditions for (1) offering insurance policies for sale through electronic channels, (2) using electronic means as part of the sale of policies, (3) issuing policies through electronic channels, and (4) paying compensation for claims through electronic channels (Notifications). The Notifications will come into effect on August 26, 2017 (180 days after publication in the Government Gazette).

The key features of the Notifications are as follows:

  • “Offering for sale of policies via electronic channel” (Online Sale): An Online Sale is generally understood to be an end-to-end binding of an insurance contract. “Online Sale” is defined under the Notifications as soliciting, inducing, or arranging for customers to enter into an insurance policy by providing descriptions of insurance products through electronic channels, without the personal involvement of an insurance agent, an individual broker, or the insurer’s employees. The customers’ acceptances of their purchases are also made through electronic channels. Online Sale excludes the offering of insurance policies through telemarketing.

Insurers, brokers, and applicable banks (with a broker license) are permitted to conduct Online Sale. Apart from the requirements under the Notifications, Online Sale activities are also subject to requirements under OIC regulations on advertisement and insurance intermediaries’ market conduct.

  • Insurer’s authorization and reporting requirement: Brokers and applicable banks, with an insurer’s authorization, may also conduct Online Sales. Insurers are required to withdraw if there is any noncompliance with the Notifications by their intermediaries, and they must report such incident to the OIC within seven days.
  • Specific product filing requirement: Insurance product wording, offered through Online Sale, must receive prior approval from the OIC.
  • Premium remittance: Electronic payment of premiums must be made to the insurance company’s accounts only. Brokers may not collect premiums and are therefore paid commission directly by the insurer.
  • Confirmation calls: Once an Online Sale is made, insurers are required to seek confirmation from the customer through telephone calls or electronic channels, such as email, within seven days from the distribution of the policy.
  • Free-look period: When confirmation calls or online confirmations are made, customers must be notified of their right to a free-look period, which is a period of 15 days after they receive their insurance policies during which they may change their mind and cancel the policy. However, this is not applicable to all categories of insurance. For example, compulsory motor insurance and travel insurance are excluded.
  • Issuing e-policies: In issuing policies through electronic channels, an e-signature must be placed by the insurer. The e-signature must comply with reliability requirements under the Electronic Transactions Act B.E. 2544 (2001). For group insurance policies, the insurer must issue an insurance certificate along with other required information to each of the insured group members, unless agreed otherwise between the insurer and the group policy holder(s).
  • E-claim payments: Insured persons/beneficiaries must be identified through a process arranged by the insurer before any electronic claims compensation is made. Claims payment must only be made to the account of the insured person or the beneficiary, whichever is agreed upon in advance.
  • Security measures: Online Sales, using electronic means as part of the sale of policies, issuing policies electronically, and paying compensation for claims must comply with the levels of security measures prescribed under the Electronic Transactions Act and the requirements on IT security systems stipulated in the Notifications (e.g., IT systems for providing such online services must be certified by an independent certification body such as CISA, CISM, CISSP, or ISO 27001 Information Security Management). In addition, the IT systems must be registered with the OIC to conduct any of the activities above.
  • Outsourcing: Third-party outsourcing arrangements are subject to the specific requirements stipulated under the Notifications. 

Compliance with these Notifications is in addition to existing regulatory requirements under the Electronic Transactions Act and other laws that regulate online business.

In addition, the OIC has announced, for public hearing, a draft subordinating notification on IT security measures certification. The draft sets out greater details on conditions and criteria for certification of IT security measures as required under the Notifications. It is expected that the draft will be implemented in the near future, possibly by the end of 2017.

Related Professionals

Industries

Insurance

Location

RELATED INSIGHTS​ 

April 19, 2021
Thailand has made significant changes to its statutory interest rate framework for the first time in almost a century. Since 1925, the statutory interest rate codified in Thailand’s Civil and Commercial Code (the CCC) has remained at 7.5% per year. But with Covid-19 having an unprecedented impact on the Thai economy, the Thai Government, via emergency decree, has reduced the statutory rate. While the decree is largely aimed at providing relief to hard-hit SMEs and individual debtors, the amendments have broader implications for doing business in Thailand. Main Changes The new interest rate revisions are contained within the Emergency Decree Amending the Civil and Commercial Code B.E. 2564 (2021) (the Emergency Decree), which was published in the Government Gazette on April 10, 2021 and came into effect on April 11, 2021. The Emergency Decree amends Sections 7 and 224 of the CCC, which stated the previous statutory interest rate of 7.5% per year. The Emergency Decree makes three major changes. The first involves a reduction of the statutory interest rate from 7.5% per year to 3% per year in Section 7. The new 3% annual rate is subject to review every three years by the Ministry of Finance. The interest rate is subject to further change later by a royal decree. The second change concerns money debts under Section 224 of the CCC. The previous version of Section 224 stated, among other things, that a money debt based on a default bears interest of 7.5% per year. Under the Emergency Decree, the new actual statutory default interest rate is the statutory interest rate stated in Section 7 with an additional rate of 2% per year. The result is a 5% annual statutory default interest rate. Since the statutory default interest rate is based in part on the Section 7
Read More
March 3, 2021
The Office of Insurance Commission (OIC) is seeking public comments on their recently released draft guidelines on Thailand’s insurance regulatory sandbox. Once enacted, the draft notification will replace the existing OIC insurance regulatory sandbox notification, aiming to broaden the OIC’s authority in order to erase difficulties in the project approval process that have arisen under the current notification. One major change included in this draft notification is that business operators are no longer allowed to conduct “own sandbox” testing. Unlike the notification currently in effect, the new draft notification also does not specify the criteria and procedures for a business operator to apply for a temporary allowance of non-compliance with non-material, test-obstructing requirements in a notification or order from the OIC or the registrar. Participants Eligible participants in the insurance regulatory sandbox—which include life and non-life insurance companies, life and non-life brokers, and other types of business operators with expertise in technology—must have appropriate capital, systems, personnel, and experience for the planned provision of service. Participants in the sandbox must establish measures to ensure that insured parties will receive sufficient information in relation to the project, and a remedial plan must be in place in case of damage arising from errors connected to the project. These measures are similar to those in the existing OIC notification, which requires that such measures must at least cover consumer protection, risk management, reporting obligations, and compliance with applicable laws. Project Requirements The draft notification reduces the number of eligible sandbox project types allowed under the existing OIC notification. When the draft notification is enacted, projects that risk regulatory incompliance, and projects that may adversely affect consumers, financial stability, or trust in an insurance company or the industry as a whole, will no longer be allowed to participate in the insurance regulatory sandbox.
Read More
February 23, 2021
As many are already aware, following the change of government in Myanmar on February 1, 2021, a draft Cyber Security Law was proposed which attracted widespread criticism. However, less attention has been paid to significant amendments to two existing laws, some of which have a similar effect to parts of the draft Cyber Security Law. In other words, while the draft Cyber Security Law has not progressed further and is under public scrutiny, significant elements of it have found their way into law in Myanmar by other routes. Because these amendments are already law, it is very important that individuals and businesses in Myanmar understand their implications. Amendments to the Law Protecting the Privacy and Security of Citizens The Law Protecting the Privacy and Security of Citizens (2017), or the “Privacy Law,” was amended on February 13, 2021, less than two weeks after the military government came into power. These amendments chiefly address the power of the government to conduct searches, seizures, and arrests; to extend detention without judicial oversight; and to carry out broad surveillance and investigation activities that could intrude on individual privacy. The amendments accomplish this by suspending various sections of the Privacy Law for as long as the State Administration Council (the military body now governing Myanmar) is in power. The suspended sections include the following: Section 5: Search, seizure, and arrest without civilian observation The relevant part of Section 5 of the Privacy Law states, “The responsible authorities shall … when acting in accordance with existing law, not enter into a person’s residence or a room used as a residence, or a building, compound or building in a compound, for the purpose of search, seizure, or arrest, unless accompanied by minimum of two witnesses who should comprise Ward or Village Tract Administrators…”. The suspension
Read More
February 22, 2021
Following the recent imposition of sanctions on Myanmar individuals and companies by the US, the UK and Canada have now imposed new sanctions. As with the US sanctions, these new measures impact UK and Canadian citizens and companies, and non-UK and non-Canadian companies and citizens with interests in those jurisdictions. The EU has indicated that it is planning to issue similar sanctions in the near future. New UK Sanctions In addition to the 16 individuals already sanctioned by the UK government, on February 18, 2021, the UK government announced that three individuals have been sanctioned for serious human rights violations and are now subject to asset freezes and travel bans. The full list of Myanmar individuals and companies sanctioned by the UK is available on the website of the Office of Financial Sanctions Implementation. Breaches of UK financial sanctions are criminal offences punishable in the UK by up to 7 years imprisonment and heavy fines. New Canadian Sanctions Also on February 18, timed to coincide with the UK sanctions, new Canadian sanctions were imposed on nine individuals. As with the UK, Canada already had a number of individuals in the Myanmar military on its sanctions list, and the new additions bring the total number of individuals sanctioned by Canada to 54. All assets of these individuals in Canada are now frozen, and they are banned from travelling to Canada. Canadian businesses or entities may not do business with any of the 54 individuals. Full details of the impact of the sanctions are available on the Government of Canada’s website, as is a database of the Myanmar individuals and companies subject to them. Breach of Canadian sanctions carries with it up to 5 years’ imprisonment in Canada and/or a large fine. Other Countries The EU is reportedly drawing up sanctions
Read More