You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

October 9, 2017

Thailand: New Risk Management Regulation for Insurance Companies to Take Effect in February 2018

The Office of the Insurance Commission (OIC) has issued notifications applicable to life and non-life insurance companies, which are intended to emphasize the importance of internal risk management in insurance companies. The notifications were published in the Government Gazette  on September 1, 2017, and will take effect 180 days later on February 28, 2018.

The notifications contain several requirements that life and non-life insurance companies must comply with:

  • A Risk Management Committee (RC) must be established, with at least one member being a director, and the others being company executives or qualified persons with an understanding of enterprise risks. The RC will be required to convene and provide a report to the board of directors quarterly. Foreign insurers in Thailand may satisfy this requirement by utilizing an RC established at their company headquarters or regional office.
  • A risk management function must be set up to manage and monitor enterprise risks and produce status reports on all risks to the company.
  • A risk officer (i.e., the head of the risk management function) must be appointed. The company must report the appointment or withdrawal of the risk officer to the OIC within 30 days.
  • A risk management framework and policy, and three-year business plan, must be submitted to the OIC annually. Potential risks arising from the business plan, and the top ten recorded risks to the company, must be mentioned in these documents.
  • An internal audit department must be assigned to monitor and assess the company’s compliance with its risk management framework and policy, and report assessment results to an audit committee or the board of directors at least annually.
  • The company must inform employees about the objectives and benefits of risk management, and provide training sessions to employees to integrate a risk management culture into everyday business operations.

It is important to note that the OIC may require any specific insurance company (or the entire industry) to perform “stress tests” on a case-by-case basis.

RELATED INSIGHTS​ 

April 19, 2021
Thailand has made significant changes to its statutory interest rate framework for the first time in almost a century. Since 1925, the statutory interest rate codified in Thailand’s Civil and Commercial Code (the CCC) has remained at 7.5% per year. But with Covid-19 having an unprecedented impact on the Thai economy, the Thai Government, via emergency decree, has reduced the statutory rate. While the decree is largely aimed at providing relief to hard-hit SMEs and individual debtors, the amendments have broader implications for doing business in Thailand. Main Changes The new interest rate revisions are contained within the Emergency Decree Amending the Civil and Commercial Code B.E. 2564 (2021) (the Emergency Decree), which was published in the Government Gazette on April 10, 2021 and came into effect on April 11, 2021. The Emergency Decree amends Sections 7 and 224 of the CCC, which stated the previous statutory interest rate of 7.5% per year. The Emergency Decree makes three major changes. The first involves a reduction of the statutory interest rate from 7.5% per year to 3% per year in Section 7. The new 3% annual rate is subject to review every three years by the Ministry of Finance. The interest rate is subject to further change later by a royal decree. The second change concerns money debts under Section 224 of the CCC. The previous version of Section 224 stated, among other things, that a money debt based on a default bears interest of 7.5% per year. Under the Emergency Decree, the new actual statutory default interest rate is the statutory interest rate stated in Section 7 with an additional rate of 2% per year. The result is a 5% annual statutory default interest rate. Since the statutory default interest rate is based in part on the Section 7
March 3, 2021
The Office of Insurance Commission (OIC) is seeking public comments on their recently released draft guidelines on Thailand’s insurance regulatory sandbox. Once enacted, the draft notification will replace the existing OIC insurance regulatory sandbox notification, aiming to broaden the OIC’s authority in order to erase difficulties in the project approval process that have arisen under the current notification. One major change included in this draft notification is that business operators are no longer allowed to conduct “own sandbox” testing. Unlike the notification currently in effect, the new draft notification also does not specify the criteria and procedures for a business operator to apply for a temporary allowance of non-compliance with non-material, test-obstructing requirements in a notification or order from the OIC or the registrar. Participants Eligible participants in the insurance regulatory sandbox—which include life and non-life insurance companies, life and non-life brokers, and other types of business operators with expertise in technology—must have appropriate capital, systems, personnel, and experience for the planned provision of service. Participants in the sandbox must establish measures to ensure that insured parties will receive sufficient information in relation to the project, and a remedial plan must be in place in case of damage arising from errors connected to the project. These measures are similar to those in the existing OIC notification, which requires that such measures must at least cover consumer protection, risk management, reporting obligations, and compliance with applicable laws. Project Requirements The draft notification reduces the number of eligible sandbox project types allowed under the existing OIC notification. When the draft notification is enacted, projects that risk regulatory incompliance, and projects that may adversely affect consumers, financial stability, or trust in an insurance company or the industry as a whole, will no longer be allowed to participate in the insurance regulatory sandbox.
February 23, 2021
As many are already aware, following the change of government in Myanmar on February 1, 2021, a draft Cyber Security Law was proposed which attracted widespread criticism. However, less attention has been paid to significant amendments to two existing laws, some of which have a similar effect to parts of the draft Cyber Security Law. In other words, while the draft Cyber Security Law has not progressed further and is under public scrutiny, significant elements of it have found their way into law in Myanmar by other routes. Because these amendments are already law, it is very important that individuals and businesses in Myanmar understand their implications. Amendments to the Law Protecting the Privacy and Security of Citizens The Law Protecting the Privacy and Security of Citizens (2017), or the “Privacy Law,” was amended on February 13, 2021, less than two weeks after the military government came into power. These amendments chiefly address the power of the government to conduct searches, seizures, and arrests; to extend detention without judicial oversight; and to carry out broad surveillance and investigation activities that could intrude on individual privacy. The amendments accomplish this by suspending various sections of the Privacy Law for as long as the State Administration Council (the military body now governing Myanmar) is in power. The suspended sections include the following: Section 5: Search, seizure, and arrest without civilian observation The relevant part of Section 5 of the Privacy Law states, “The responsible authorities shall … when acting in accordance with existing law, not enter into a person’s residence or a room used as a residence, or a building, compound or building in a compound, for the purpose of search, seizure, or arrest, unless accompanied by minimum of two witnesses who should comprise Ward or Village Tract Administrators…”. The suspension
February 22, 2021
Following the recent imposition of sanctions on Myanmar individuals and companies by the US, the UK and Canada have now imposed new sanctions. As with the US sanctions, these new measures impact UK and Canadian citizens and companies, and non-UK and non-Canadian companies and citizens with interests in those jurisdictions. The EU has indicated that it is planning to issue similar sanctions in the near future. New UK Sanctions In addition to the 16 individuals already sanctioned by the UK government, on February 18, 2021, the UK government announced that three individuals have been sanctioned for serious human rights violations and are now subject to asset freezes and travel bans. The full list of Myanmar individuals and companies sanctioned by the UK is available on the website of the Office of Financial Sanctions Implementation. Breaches of UK financial sanctions are criminal offences punishable in the UK by up to 7 years imprisonment and heavy fines. New Canadian Sanctions Also on February 18, timed to coincide with the UK sanctions, new Canadian sanctions were imposed on nine individuals. As with the UK, Canada already had a number of individuals in the Myanmar military on its sanctions list, and the new additions bring the total number of individuals sanctioned by Canada to 54. All assets of these individuals in Canada are now frozen, and they are banned from travelling to Canada. Canadian businesses or entities may not do business with any of the 54 individuals. Full details of the impact of the sanctions are available on the Government of Canada’s website, as is a database of the Myanmar individuals and companies subject to them. Breach of Canadian sanctions carries with it up to 5 years’ imprisonment in Canada and/or a large fine. Other Countries The EU is reportedly drawing up sanctions