You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 30, 2024

Thailand Issues Draft Platform Economy Act

Subscribe to Updates

Thailand has made its draft Platform Economy Act (the “Draft PEA”) available to relevant entities in certain industries. The Draft PEA aims to regulate and standardize digital platform service business operations and protect consumers and other stakeholders.

Once the Draft PEA becomes law, the Royal Decree on the Operation of Digital Platform Service Businesses that are subject to Prior Notification B.E. 2565 (2022) and the relevant provisions under the Electronic Transactions Act B.E. 2544 (2001), as amended, will cease to have effect.

The key provisions of the Draft PEA are summarized below.

Definitions

The definitions of the key terms under the Draft PEA are substantially similar to the definitions of the key terms under the royal decree mentioned above. According to the Draft PEA, “digital platform services” refers to the provision of electronic intermediary services that manage data to facilitate connection, through computer networks, between business users, consumers, or users, regardless of whether remuneration is charged.

Exemption

The Draft PEA does not apply to digital platform services (DPSs) that are regulated by specific laws and have rules guaranteeing transparency and fairness, or that follow operational standards no less stringent than those required in the Draft PEA. Nonetheless, the Electronic Transactions Development Agency (ETDA) can request or link data relating to exempted DPSs from the relevant supervisory authorities.

Extraterritorial Effect

Offshore DPSs with certain characteristics are also subject to the obligations under the Draft PEA and will have to appoint a coordinating person in Thailand. However, offshore DPSs will not have to establish a business in Thailand.

General Responsibilities and Obligations

The Draft PEA sets out the following requirements:

  • DPSs with (1) at least THB 100 million (approx. USD 2.8 million) in annual revenue from providing the DPSs in Thailand before deducting expenses, or (2) more than 10,000 monthly users in Thailand (calculated from the average monthly usage pursuant to the rules of the ETDA) must report their operations to the ETDA within 30 days of becoming aware that they fall within either of the criteria.
  • Upon any changes in the name, type, channel, or other details of a DPS provider or the DPSs, or in the details of the local coordinator, the ETDA must be notified of the relevant information within 30 days from the date of the change. Any changes must also be included in an annual report due 60 days from the end of each calendar year for individuals or from the end of each fiscal year for legal entities.
  • DPS providers are responsible for the lawfulness of their users’ data and any other data transmitted through the DPS, unless it can be proved or evidence can be shown in court that the DPS acts only as an intermediary for the transmission of the data and does not store it, or that the DPS does not have access to the data.
  • DPSs that do not only act as intermediaries for the transmission of data, or for which the provider can access users’ data or other transmitted data, must implement a system, mechanism, or procedure enabling other persons to report illegal acts or noncompliance. Upon receiving such a report, the DPS must delete or block the illegal data. If the DPS determines that there is no illegal data or noncompliance, the finding must be promptly reported to the ETDA.
  • Measures for the alleviation of injuries, compensation, and remediation must be in place.

Additional Obligations for Certain DPSs

Additional obligations are imposed on two categories of DPSs that have specific characteristics.

A “specific type of DPS” is one that provides all of the following services:

  • Sending and receiving data of users and other persons;
  • Storing data of users and other persons; and
  • Matching different categories of users to facilitate electronic transactions or for the benefit of selling and purchasing goods or services through the DPS.

These specific types of DPSs are obligated to notify users of the laws relating to the purchasing of goods or services and the associated risks; implement a notification system for products that are required by law to have an expiry date; monitor and ensure that the DPS will not be used for illegal activities and immediately report any suspicious activities to the ETDA; implement an identity verification system; and submit an annual report to the ETDA on the DPSs’ transparency, among other obligations.

A “large DPS” is one that:

  • Has over THB 1 billion in annual revenue, before deducting expenses, from the provision of a DPS in Thailand;
  • Has over 100,000 monthly users in Thailand; or
  • Poses a high risk to Thailand’s economy and social stability, or a high risk of potential damage to the public.

Large DPSs are obligated to engage external experts to assess risks at least once a year; arrange for IT audits; appoint a chief compliance officer to liaise with the ETDA and other competent authorities; disclose factors and methods used for processing data to offer goods or services as well as the ranking of those goods or services; and implement channels to enable users to exercise the right not to receive advertisements, among other obligations.

DPS Cessation

In cases of DPS cessation, notification of the cessation must be made to the ETDA at least 60 days prior to the date of cessation. For large DPSs, the cessation notification must be submitted at least 120 days in advance, along with a plan and measures for taking care of users after the cessation. A DPS only ceases once a receipt of notification for the cessation has been issued by the competent official.

Blockage of the Transmission of Data

If there is a transmission of illegal data through a DPS, the ETDA may order that the transmission of data by or to a user be blocked. If the order is not complied with, the ETDA may file a petition with the court requesting an order to block the transmission of data on the DPS.

Whistleblowers and Trusted Flaggers

The ETDA has the duty to recruit, examine, and certify whistleblowers or trusted flaggers and announce the list of certified whistleblowers on its electronic channel. Providers of specific types of DPSs or large DPSs must collaborate with the whistleblowers on certain aspects, such as by having a channel for whistleblowers to register their accounts and so on.

Agreements between DPSs and Users

Operators must clearly declare terms and conditions to users before and during service usage, addressing certain required items such as terms of service, suspension or termination of services, and service fees.

Competition Supervision

The ETDA and the Office of Trade Competition Commission (OTCC) will collaboratively establish criteria for determining the list of gatekeeping platforms and will publish it within six months of the criteria coming into effect.

The ETDA and the OTCC may issue regulations on behaviors, service conditions, and any other activities that are deemed to be an unfair exercise of gatekeeping platforms’ business power (ex-ante regulations).

Next Steps

The Draft PEA will be disclosed for a hearing involving relevant stakeholders and the public before the first draft is finalized.

For more details on digital platform services in Thailand, or on other aspects of the country’s technology-related laws, please contact Athistha (Nop) Chitranukroh at [email protected], Gvavalin Mahakunkitchareon at [email protected], Pornpan Wichawut at [email protected], Thammapas Chanpanich at [email protected], or Rada Lamsam at [email protected].

Related Professionals

Industries

Fintech

Technology

Location

RELATED INSIGHTS​ 

May 25, 2026
Thailand published new rules on May 1, 2026, establishing clear procedures for how the Anti-Money Laundering Office (AMLO) handles digital assets seized during criminal and money laundering investigations. Taking effect the following day, the Regulation of the Anti-Money Laundering Board on the Custody and Management of Seized or Frozen Assets (No. 3) B.E. 2569 applies to digital asset businesses, cryptocurrency holders, and anyone subject to asset seizure under Thailand’s anti-money laundering laws. For the first time, authorities now have a detailed roadmap for transferring seized digital property from private or foreign control into secure state custody. Digital asset businesses holding customer assets under investigation must be prepared to comply with these rules compelling repatriation of such assets in enforcement actions. Expanded Definition of Digital Assets The regulation defines digital assets to include not only those covered by Thailand’s existing digital asset business law but also any other property that can be stored using the same methods as digital assets. This broad formulation means the custody rules will apply to emerging blockchain-based assets and tokenized property that may not yet fall within the statutory definition of a digital asset business, giving authorities flexibility as the technology evolves. Mandatory Transfer to Domestic Custody When digital assets are held with service providers outside Thailand, AMLO will first attempt to transfer them to an account the office maintains with a licensed domestic digital asset business operator. If the domestic operator does not support that particular asset, the office will instead move the assets to its own cold wallet (offline, internet-isolated storage system). If neither option is feasible, the seizing official will report the situation to the Anti-Money Laundering Committee for alternative instructions. A similar hierarchy governs assets held in an accused party’s private wallet or by any third party that is not a
Read More
May 22, 2026
On May 8, 2026, the Thai government held a press conference to announce a coordinated, multiagency initiative to strengthen oversight and enforcement over products sold on online platforms. The initiative involves the Office of the Consumer Protection Board, the Thai Industrial Standards Institute, the Electronic Transactions Development Agency, the Thailand Consumers Council, the Consumer Protection Police Division, and major online platform operators. With this appointment, the government has signaled a deliberate shift from a predominantly reactive enforcement framework toward a more proactive regulatory and monitoring approach for online commerce and digital platform services. Legal and Regulatory Reform The government is accelerating a proposed Product Liability Law that would introduce new statutory frameworks for defective or substandard products, along with amendments to food safety and consumer protection legislation. The draft law has already been approved by the cabinet; the Council of State and relevant authorities will further draft the law and subsequently issue it for public hearings prior to enactment. Authorities also plan to expand enforcement measures against noncompliant businesses and distributors. In particular: The implementation of stricter “know your merchant” (KYM) identity verification requirements for online sellers. Expanded mandatory standards and regulatory oversight for high-risk products, such as power banks, electrical appliances, food products, and household goods. Increased monitoring of online product listings, and coordination with platform operators to remove unsafe, counterfeit, misleading, or otherwise noncompliant products. Additional monitoring and enforcement measures targeting online scams and illegal goods distributed through digital platforms, including e-cigarettes, which authorities identified as a growing concern due to increasing online distribution channels and potential health impact on young consumers. Strengthening Consumer Complaint Mechanisms The government announced increased cooperation with the Thailand Consumers Council and other agencies to facilitate complaint handling, market monitoring, and policy recommendations. Enhanced interagency coordination will aim to ensure that consumer
Read More
May 19, 2026
Thailand’s telecommunications regulator has introduced a range of new compliance obligations for telecom licensees aimed at preventing and suppressing technology crime. On May 15, 2026, the National Broadcasting and Telecommunications Commission (NBTC) published in the Government Gazette Notification on Measures for Prevention and Suppression of Technology Crime No. 2, which amends the original NBTC notification dated August 24, 2025. The amendment derives its authority from the Emergency Decree on Measures for Prevention and Suppression of Technology Crime B.E. 2566 (2023), as amended in 2025, and took effect on May 16, 2026. SIM Card Registration Cap for Non-Thai Nationals Persons without Thai nationality are now limited to a maximum of three SIM cards per person per service provider. Identity verification must be done primarily via passport. For those without a passport, acceptable alternatives include travel documents or certificates of identity issued by foreign governments, accompanied by additional Thai government-issued documents, as well as pink ID cards (for persons without Thai nationality) and white ID cards (for persons without registration status). Registration must be done in person at a branch or authorized dealer. Service providers must develop their identity verification systems and obtain NBTC approval before deployment. SIM Activation Deadline and SIM Box Prohibition Both Thai and non-Thai service users must activate their registered SIM within 60 days of registration. If they fail to do so, they must re-verify their identity in person before activation, confirming they are the same person who originally registered. Service providers must prohibit SIM box and gateway devices capable of supporting four or more SIMs from connecting to their mobile networks unless the device has received a license under the Radio Communications Act. Blacklist Enforcement Service providers must refuse registration of additional mobile numbers for persons listed on a technology crime-related database maintained by the Royal
Read More
May 6, 2026
Thailand has introduced new requirements for online social media platforms to verify the identity of paying advertisers before publishing their advertisements. On May 5, 2026, the Electronic Transactions Commission published the Notification on Measures for Prevention of Technology Crime for Online Social Media (No. 2) in the Government Gazette. The notification, which aims to prevent technology crimes such as fraud and scams, takes effect 180 days after publication (i.e., on November 1, 2026). Mandatory Advertiser Identity Verification Online social media service providers must verify the identity of every advertiser before publishing an advertisement. Verification remains valid for up to one year from the most recent verification date. The notification requires social media providers to use either of the following methods when verifying advertisers: Document-based verification: Examine government-issued identity documents (e.g., national ID, passport, or juristic person registration certificate), cross-check the connection between the advertiser and the identity documents (e.g., facial comparison with photo ID), and ensure that the identity documents are verifiable against reliable sources. Digital identity verification: Use an identity verification system with a level of assurance no lower than that prescribed by the Electronic Transactions Commission. Advertiser Data Collection and Retention Service providers must collect and retain certain data—including name, identification number, and contact details—from the start of the advertising service and for a minimum of 90 days after the end of the advertising service relationship. The same requirements apply where there is a third-party payer, such as an ad agency. Implications for Affected Businesses The notification raises two key areas of concern for affected businesses: Social media platforms must implement know-your-advertiser (KYA) onboarding as described above, including document upload and identity matching processes. The 180-day implementation window requires immediate technical and operational planning. The collection and retention of national ID cards, passport copies, and other personal
Read More