You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 3, 2020

Thailand Introduces Stringent Requirements for Distribution of Insurance Products

Subscribe to Updates

On July 31, 2020, Thailand’s Office of Insurance Commission (OIC) imposed a host of new measures aimed at regulating the issuance of insurance policies and the conduct and duties of insurance agents and brokers.

These measures are contained in two new notifications: the Notification re: Conditions Relating to the Issuing and Offering of Insurance Policies of Insurance Companies; and the Notification re: Duties of Life and Non-life Insurance Agents, Brokers, and Banks. The key provisions to note are identified below.

General Duties of Insurance Companies

  • Insurance companies must institute a quality control system for the sale of insurance policies and provision of services. This should also cover the development of new insurance products and administrative and monitoring systems for the offering of insurance products. Such systems must also be approved by the company’s board of directors.
  • If an insurance company finds that an intermediary fails to comply with the requirements of the new notifications, the company must immediately revoke the intermediary’s authority to offer insurance products for sale on behalf of the insurance company, and keep a record of any such noncompliance for the OIC’s inspection.
  • Insurance companies must comply with the OIC Notification regarding Criteria, Procedures, and Conditions for Enterprise Risk Management (ERM) and Own Risk and Solvency Assessment (ORSA). 

General Duties of Intermediaries

  • The general and specific duties of intermediaries under the new notifications are very similar to those given in previous notifications, with changes of wording for conciseness. However, the new notifications do add a new general duty as well as an exception:
  • Intermediaries are required to thoroughly study the details and coverage of insurance policies before conducting any sales, and to ensure that the insurance policies offered are suitable for each customer’s purposes, risk appetite, and ability to pay premiums.
  • Intermediaries may fix a condition for the customers to enter into an insurance contract in order to receive services, or enter into a transaction, provided that the purpose of the condition is to directly prevent a risk associated with the provision of service or entry into the transaction.

Offering Insurance Products via Employees or Staff (Face-to-Face)

  • The new notifications repeal the OIC notification regarding digital face-to-face measures during the COVID-19 pandemic. However, the new notifications also provide an exemption for face-to-face sales to be carried out digitally (e.g., by voice, video, and images), provided there is a justifiable necessity to do so and the customer in question consents to a digital face-to-face meeting. Insurance companies and intermediaries must arrange for appropriate systems and sales processes to accommodate this, such as communication records, quality control, and personal data protection.
  • For offering unit-linked or universal life insurance policies, intermediaries are required to pass the relevant training and register with the OIC in accordance with the criteria prescribed by the OIC.

Offering Insurance Products via Bancassurance

  • Upon receiving a customer’s consent, banks can now offer insurance products outside of their offices. However, banks must comply with the requirements for this, which will be prescribed by the OIC in due course.

Offering Insurance Products via Telesales

  • The new notifications also prescribe the minimum requirements for intermediaries arranging systems or procedures to carry out telesales. These include a voice recording system and storage, a do-not-call list, policies and procedures for lawful collection and retention of customers’ data, and a risk management or business continuity plan.

Receipt, Retention, and Remittance of Premiums

  • For the sale of insurance products via the digital face-to-face channel, or if the intermediaries are licensed business operators under the laws relating to the Payment System Act, the premium must be remitted directly to the company’s account.

Information Disclosure and Handling of Customer Data

  • Companies must disclose information about their intermediaries to customers, and must keep that information up to date.
  • Corporate brokers and banks must also disclose information about employees who offer insurance policies on their behalf, and must keep that information up to date.
  • Insurance companies and intermediaries must implement a system or procedure for the collection, retention, and protection of customer data in compliance with the Personal Data Protection Act B.E. 2562 (2019).

Penalties

  • Any breach of the conditions specified in the new notifications is a criminal offense, with the offender subject to the penalties specified in the Non-Life Insurance Act B.E. 2535 (1992).

For advice on complying with these new regulations, or for any other information on insurance business in Thailand, please contact the Tilleke & Gibbins insurance team at [email protected], [email protected], or [email protected].

Related Professionals

Industries

Insurance

Location

RELATED INSIGHTS​ 

April 9, 2026
Thailand’s Office of the Insurance Commission (OIC) has published two parallel sets of draft regulatory amendments for public hearing—one governing non-life insurance and the other governing life insurance. The proposed amendments would significantly revise the rules for issuing, offering, and selling insurance policies, as well as the conduct of agents, brokers, and banks. Stakeholders may submit comments until April 25, 2026. The key proposed changes are summarized below. Electronic Policy Delivery by Default Under both draft amendments, electronic delivery would become the default method for delivering insurance policies. A printed copy would be required only if the policyholder expressly opts out, and any such printed copy would be treated as a substitute for the electronic original. For life insurance, this requirement would also extend to coverage summaries and to exclusion documents. The OIC would also retain authority to approve alternative delivery methods for specific types of policies. Misuse of Licenses Both amendments would introduce an explicit prohibition against sales representatives using another person’s name or license, or allowing another person to use their name or license, in connection with the offering of insurance or in sales documentation and policies. Premium Collection Reforms Both amendments would introduce the premium collection reforms outlined below. Premium receipt accounts Insurers must ensure that sales representatives inform customers of the available payment channels, which are limited to channels that remit premiums into the insurer’s account. If a customer pays an insurance premium to an insurer’s employee, an insurance broker, or any other person, and the company acknowledges the payment by issuing an insurance policy or other documentary evidence of insurance coverage, the insurer would be deemed to have received the insurance premium. Written premium collection and refund guidelines Insurers would be required to prepare written internal guidelines covering premium collection and refund policies, risk
Read More
April 2, 2026
Thailand’s Personal Data Protection Act (PDPA) enforcement has entered a new phase, and the insurance industry is squarely in the regulatory spotlight. The Personal Data Protection Committee (PDPC) considers insurers “large-scale” processors of sensitive data—including health records, financial information, and biometric data—making the sector a focal point for enforcement action. In August 2025 alone, the PDPC issued administrative fines totaling THB 21.5 million, and fines for individual violations have ranged from THB 50,000 to THB 2 million. The PDPC has also deployed its “Eagle Eye Crawler,” an AI-driven surveillance tool that monitors websites around the clock for data leaks and noncompliant privacy notices. This article highlights the key regulatory developments directly affecting insurers and outlines practical steps toward compliance. What Has Changed: OIC and PDPC Alignment The Office of Insurance Commission (OIC) has synchronized its sector-specific rules with the PDPA through the Notification on Customer Personal Data Protection (No. 2) B.E. 2568 (2025). The combined effect of the PDPC’s general enforcement push and the OIC’s sectoral guidance creates four critical compliance areas for insurers. Consent unbundling. Consent for marketing must be strictly separated from the core insurance contract; bundling marketing consent into the policy application is no longer permissible. Agent and intermediary oversight. Insurance intermediaries are generally classified as data processors, meaning that insurers—as data controllers—must provide specific written instructions and security protocols to all agents and brokers. A 2026 enforcement trend shows controllers being held liable for the “weak security” of their vendors and downstream processors. Enhanced privacy notices. Insurers must provide a summary privacy notice alongside the full policy, plainly stating categories of data, purposes, lawful bases, disclosure recipients, cross-border transfers, retention periods, data subject rights, and easy marketing opt-out channels. DPO registration and ROPA. All organizations involved in “regular or systematic monitoring of data subjects on
Read More
March 17, 2026
Thailand’s Office of Insurance Commission (OIC) has introduced comprehensive group-wide supervision requirements for insurers operating within corporate groups. Published on February 26, 2026, in two separate notifications in the Government Gazette, the new rules establish parallel frameworks for life and non-life insurance companies. Both notifications take effect on July 1, 2026, and impose significant new requirements on insurance business groups. Affected insurers should begin reviewing their group structures, governance frameworks, and risk management systems now to ensure timely compliance. The notifications aim to ensure that group-level operations are orderly, stable, and reliable, and prevent the accumulation of systemic risk that could undermine public confidence in the insurance sector. Both notifications share a substantially parallel structure and require insurers to assess and manage the financial position, risk exposure, reliability, and corporate governance of their entire insurance business group on a comprehensive and ongoing basis. The regulations introduce definitions for several key terms. An “insurance business group” encompasses the insurer together with its ultimate parent company, parent companies, subsidiaries, and related companies. The “head of the insurance business group” is the entity responsible for overseeing group-wide supervision, operations, and governance. An “ultimate parent company” is one that exercises control without itself being controlled by another entity. Key Requirements The notifications establish the following core obligations for insurers: Group structure and shareholding reporting: Insurers must report the organizational chart and shareholding structure of their insurance business group—covering the ultimate parent company, parent companies, subsidiaries, and related entities—to the OIC registrar by June of each year, and whenever material changes occur. The regulations prescribe specific thresholds for determining when shareholding proportions constitute control. Corporate governance standards: Board members, executives, and authorized persons of the ultimate parent company or parent company must not be disqualified (e.g., bankrupt individuals, persons convicted of property-related fraud, or
Read More
January 22, 2026
On December 10, 2025, Vietnam’s National Assembly enacted Law No. 139/2025/QH15 amending the Law on Insurance Business. The amendment, effective from January 1, 2026, introduces various changes in an effort to lift restrictions and hurdles for insurance businesses. Key points that may impact the activities of stakeholders in Vietnam’s insurance market are highlighted below. Management Personnel Qualifications To broaden the talent pool while ensuring competency standards, the amended law opens up the positions of director or general director to more candidates. Previously, candidates were required to hold either (i) a university degree or higher in insurance or (ii) a university degree in another discipline and an insurance certificate issued by a qualified insurance training institution. Now, candidates holding a university degree or higher in economics, finance, banking, law, business administration, accounting, or auditing, with at least one insurance‑related module, are also accepted. These changes are expected to mitigate the ongoing challenges faced by insurers in recruiting suitably qualified candidates for key executive positions, while still maintaining appropriate professional standards. Fewer Registrations for Insurance Businesses As part of the legislature’s broader initiative to reduce administrative burdens across all business sectors, the amended Law on Insurance Business relaxes registration requirements for the insurance industry, notably: Insurance enterprises and foreign non‑life insurance branches are no longer required to register and obtain prior approval from the Ministry of Finance (MOF) for their methodologies and bases for calculating premiums for motor vehicle insurance products (excluding compulsory civil liability insurance for motor vehicle owners). Instead, insurance enterprises are now only required to notify the MOF before applying or amending these methodologies. While life insurers must continue to register with the MOF their principles for separating owners’ equity from insurance premium funds, non‑life insurance enterprises and foreign non‑life insurance branches are now only required to notify
Read More