You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

January 6, 2026

Thailand Issues High-Risk Product List for Digital Marketplaces

On December 30, 2025, Thailand’s Electronic Transactions Development Agency (ETDA) notified digital marketplace operators of a consolidated list of “high‑risk products” that are subject to strict monitoring on digital platforms.

The list was jointly prepared by the Thai Industrial Standards Institute (TISI) and the Food and Drug Administration (FDA) to guide platform compliance in the initial phase of implementation of the Electronic Transaction Committee’s Notification on Other Measures for Marketplace for Goods with Specific Characteristics under Section 18(2) of the 2022 Royal Decree on Digital Platform Businesses Requiring Notification B.E.2568 (2025).

The notice is addressed to operators of digital platform services that function as product marketplaces with specific characteristics laid out in the notification. The ETDA states that the TISI and the FDA are closely monitoring the high‑risk product categories on digital platforms, and the published list serves as the baseline reference for platform screening during the initial phase of the notification’s implementation.

High‑Risk Product List

The list aggregates categories of products that are illegal to sell online or are otherwise tightly regulated under Thai law, with an emphasis on health-related products, controlled substances, medical devices, and a wide range of industrial products that require certification or compliance with specified Thai Industrial Standards, as detailed below.

  • Prohibited and tightly controlled health products. This includes all categories of modern medicines subject to control other than general household remedies; all categories of controlled herbal products except for over-the-counter herbal products; narcotics; psychotropic substances; and medical devices requiring use in medical facilities or a physician’s prescription.
  • Selected industrial products requiring heightened controls. The list highlights dozens of TISI-regulated items commonly sold online. Examples include pacifiers, rice cookers, electrical wire, food wrap film, crayons, washing machines and dryers, air conditioners, electric cookers and air fryers, water heaters, microwave ovens, LED luminaires, hair dryers and gel nail lamps, and residual current devices and power strips. The list also covers the TISI category that includes cookware with nonstick coatings, automotive and motorcycle tires, LED lamps, power banks, melamine tableware, motorcycle helmets, consumer appliances such as irons and air purifiers, adapters, plastic food containers and utensils, multiple types of children’s toys, automotive safety belts, lighters, HVAC fans, tempered glass, and rubber nipples for infant feeding.

Obligations and Compliance

The ETDA expects marketplaces that fall within the scope of the Electronic Transaction Committee’s notification to use the TISI/FDA list of high-risk products as a priority screening guide and to apply strict controls when allowing listings in these categories.

Because the TISI and the FDA are actively monitoring compliance, marketplace platforms should ensure that product listings in covered categories have required certifications, registration numbers, and labeling, and that prohibited health products and controlled substances are not listed.

Platforms should notify sellers and merchants operating in affected categories of the heightened controls and, where applicable, require documentary evidence of conformity with relevant TISI standards or FDA approvals prior to listing or at periodic intervals.

RELATED INSIGHTS​ 

July 16, 2026
Thailand’s Office of the Personal Data Protection Committee (PDPC) published a series of draft guidance documents for public consultation on July 7, 2026. Issued under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the drafts address a range of compliance issues and offer insight into the regulator’s current enforcement priorities. This article examines two of those drafts: one on lawful bases for processing personal data, and another on marketing and direct marketing. Together, they reflect the Office of the PDPC’s evolving expectations on lawful-basis selection, accountability, and the use of personal data in marketing. Organizations operating in Thailand should assess the practical implications now, before the guidance is finalized. Lawful Bases: A Structured Selection Process The draft guidance on lawful bases introduces a systematic five-step process for selecting an appropriate lawful basis for each processing activity. Organizations are expected to: Identify the processing activity involved. Assess the appropriate lawful basis. Evaluate whether the data is necessary for the processing. Conduct a legitimate interest assessment (LIA) where applicable. Ensure transparency through privacy notices. The guidance provides practical explanations and examples for each lawful basis under section 24 of the PDPA—including archiving, research, statistics, vital interests, contractual necessity, legal obligation, public task, legitimate interests, and consent—as well as the bases applicable to sensitive personal data under section 26. The aim is to promote more consistent and accurate lawful-basis selection across public- and private-sector organizations. A recurring theme throughout the guidance is that organizations should select the lawful basis that most accurately reflects the actual purpose and circumstances of the processing activity. The guidance cautions against treating consent as a default or catch-all basis where another lawful basis is more appropriate. For processing based on legitimate interests, organizations should conduct and document an LIA. Processing involving sensitive personal data may require
July 14, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published guidelines establishing a risk-based framework for the responsible use of artificial intelligence by telecom licensees. Released on July 2, 2026, the Guidelines on the Use of Artificial Intelligence for Telecommunications Services address governance structures, ethical principles, lifecycle management, and consumer protection obligations. Scope and Legal Context The nonbinding guidelines apply to holders of telecom business licenses under Thailand’s telecom licensing laws, but only with respect to the use of AI in providing licensed telecom services. Entities without such licenses are not directly subject to the guidelines, though they may be affected as third-party AI solution providers to licensees. The guidelines supplement and should be read alongside existing laws, including the Cybersecurity Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and the NBTC Notification regarding Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications, as well as forthcoming AI governance legislation being drafted by the ETDA. AI Governance Structure Licensees are expected to establish committees, working groups, or designated officers at both policy and operational levels to set strategic direction for AI use, formulate governance policies and tools, and oversee risk management. Roles, responsibilities, and accountability should be clearly defined for all personnel across every stage of the AI lifecycle—including for third-party AI solution providers and outsourced service providers, whose obligations should be explicitly documented in service agreements. Core Principles The guidelines identify six core principles that licensees should adhere to when deploying AI: Compliance with laws, ethics, and international standards: AI should respect privacy, dignity, and human rights, and content filtering for inputs and outputs should be considered. For example, the AI should not be designed and developed to be used in generating false information, supporting illegal activities, or causing
July 13, 2026
Indonesia’s Halal Product Assurance Agency (BPJPH) has issued new regulations establishing clearer procedures for imposing administrative sanctions on businesses that violate halal product assurance requirements. BPJPH Regulation No. 2 of 2026 on the Imposition of Administrative Sanctions for Violations of Halal Product Assurance Implementation, issued on June 5, 2026, strengthens Indonesia’s halal compliance framework, as mandated under Law No. 33 of 2014 on Halal Product Assurance and Government Regulation No. 42 of 2024 on the Implementation of Halal Product Assurance. BPJPH Regulation No. 2/2026 also supports the upcoming mandatory halal compliance deadline of October 17, 2026, which will apply to a broad range of products and services, including imported food and beverages, slaughtering products and services, natural and quasi-drugs, health supplements, cosmetics, chemical and genetically engineered products, clothing and accessories, household goods, prayer equipment, stationery, and class A medical devices. Scope BPJPH is authorized to impose administrative sanctions for violations of halal product assurance requirements committed by businesses, halal inspection agencies (LPH), halal auditors, halal product process companion institutions (lembaga pendamping PPH), and halal product process companions (pendamping PPH). The head of BPJPH has authority to determine, cancel, or amend the imposition of administrative sanctions, including upon receipt of objections. This authority covers revocation of Halal Certificates (including foreign halal certificate registration numbers), withdrawal of goods from circulation, freezing of LPH operations, freezing of halal product process companion institutions, revocation of PPH companion institution registration numbers, revocation of halal auditor registration numbers, and revocation of LPH accreditation status. Administrative Sanctions Businesses may be subject to any of the following administrative sanctions: Written warning; Administrative fine; Revocation of the halal certificate, including revocation of foreign halal certificate registration numbers; and Withdrawal of goods from circulation. The regulation sets out the types of violations that may trigger these sanctions, with each
July 10, 2026
Vietnam has taken a significant step in regulating its e-commerce sector with the issuance of a new decree guiding the country’s recently enacted Law on E-Commerce. Decree No. 248/2026/ND-CP, issued on June 30, 2026, and taking effect the following day, addresses mandatory platform policies, registration requirements for offshore platforms, additional obligations on platform operators, and market access conditions for foreign investors. Mandatory Policy Contents The decree sets out detailed guidance on the required contents of various platform policies, covering pricing, payment, display priority, livestream sales, delivery, returns, method of service provision, and service termination and refunds. Clarification of Obligations for Platform Operators The decree provides clarification of the obligations applicable to platform operators. Notably, intermediary e-commerce platform operators with online ordering functions must: Collect specific information to implement electronic identity verification of sellers; Cooperate with regulators by reporting online through the state e-commerce management system and by blocking, suspending, or removing content upon request of a competent authority; Maintain a mechanism to store contract data, including price, product or service information, and parties’ information, for at least three years from the date of contract conclusion; and If qualifying as a “large digital platform” under consumer protection law, maintain an online system for receiving and handling complaints and requests, and comply with enhanced content-removal requirements. Registration Requirements for Offshore Platforms Offshore e-commerce platforms, whether direct-sales, intermediary, social-network-based, or integrated, that conduct e-commerce activity in Vietnam must register with the Ministry of Industry and Trade if the platform: Allows Vietnamese-language selection; Uses a “.vn” domain; or Reaches 100,000 or more transactions with Vietnam-based buyers within a calendar year. Notably, the registration requirement now captures not only traditional intermediary platforms, but also direct-sales platforms. Foreign Investment Conditions Foreign investors holding a controlling interest in an intermediary e-commerce platform, a social media platform