You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 1, 2022

Thailand Strengthens Supervisory Framework for Investments by Insurance Companies

On June 2, 2022, Thailand’s Office of Insurance Commission (OIC) issued Notification No. 6 Re: Investments in Other Business Operations for both life and non-life insurance companies. The two notifications, which took effect upon issuance, strengthen the OIC’s supervision of investments by insurance companies, with a focus on basic infrastructure relevant to the promotion of business competition and sustainability, and also allow and regulate additional investment types.

Internal Governance of Investment Activities

An insurance company’s board of directors is required to appoint a credit committee when engaging in credit activities. These activities include providing loans (excluding personal loans to employees or loans made under a guarantee by its insurance policies), car leasing services, avals for bills of exchange, and letters of guarantee for project performance.

The credit committee has the following duties:

  • Preparing the credit policy framework for the credit activities described above for further board approval;
  • Supervising the credit activities;
  • Overseeing good corporate governance, transparency, and prevention of conflict of interest in relation to credit activities;
  • Ensuring that the work system, manpower, and data in relation to credit activities are sufficient; and
  • Regularly reporting to the board of directors regarding credit activities.

Credit policies must at least cover:

  • Procedures and conditions for credit transactions. These include risk management, internal controls, data storage, and written reporting requirements. The procedures and conditions must comply with the relevant OIC regulations and the Bank of Thailand’s minimum standards for financial institutions.
  • Persons responsible for operations relating to credit work, risk management for credit transactions, and verification of credit transactions. These roles include (1) the credit analyst, (2) the person who approves appropriate credit transactions, (3) the verifier of work accuracy after a credit transaction is approved, (4) the person in charge of reporting credit transaction risks, and (5) the person responsible for verifying credit transactions and reporting this to the board of directors. Roles 1, 2, and 4 must not be the same person, and the team in charge of roles 1 and 2 must not be the same as the team handling roles 3, 4, and 5.

Permitted Investments

The notifications allow additional types of investment, as shown in the table below.

The aggregated amount of investment in the products listed above is capped at 30% of the total investment assets of the company.

Investment in Syndicated Loans

The OIC notifications introduce syndicated loans as a new type of permitted investment, and prescribe certain conditions for the investment in syndicated loans for infrastructure businesses. In this case, “infrastructure businesses” refers to Thai government-owned infrastructure businesses and infrastructure businesses located in the ASEAN region.

Insurance companies are permitted to invest in syndicated loans for the following types of infrastructure businesses:

  • Rail or pipeline transportation systems;
  • Electricity supply;
  • Water supply;
  • Airports or aerodromes;
  • Deep water ports;
  • Telecommunications or basic information and communication technology infrastructure;
  • Alternative energy;
  • Water management systems;
  • Natural disaster prevention systems, including alarm and management systems for mitigation of natural disasters;
  • Waste disposal; and
  • Combinations of the infrastructure businesses listed above.

To invest in syndicated loans, an insurance company must possess the following characteristics:

  • Capital surplus of at least THB 1 billion;
  • Asset ratio of 110%;
  • Capital adequacy ratio (CAR) for the latest four quarters of at least 200%; and
  • Sufficient systems to support credit-related transactions.

Other Compliance Considerations

In addition to the rules for syndicated loans, the OIC notifications also prescribe rules for other types of investment.

Insurance companies that invested in loans, car leasing, avals, or guarantees before the issuance of the OIC notifications must also comply with the new rules, including appointing the credit committee (or alternative), instituting a credit policy, preparing credit-related data, and refinancing, within 180 days of the effective date of the OIC notifications (i.e., late November 2022).

For more details on the OIC notification, or on any aspect of insurance business in Thailand, please contact Witchupong Chittchang at [email protected] or Thammapas Chanpanich at [email protected].

RELATED INSIGHTS​ 

June 30, 2026
Tilleke & Gibbins’ insurance specialists in Bangkok provided Thomson Reuters’ latest country update on Thailand’s regulatory framework for the insurance industry. The country update, which is part of Thomson Reuters’ extensive Regulatory Intelligence offerings, contains information and guidance for insurers active in the Thai market. The guide covers the following topics in detail: Permission to operate; Legal and regulatory considerations for domestic and international insurers; Capital reserve requirements; Investment management and markets; The Office of Insurance Commission’s arbitration system for handling complaints; Creditor hierarchy; Rehabilitation of non-life insurance companies; and Personal data protection requirements for insurers. Thomson Reuters Regulatory Intelligence is a service that provides with curated news, analysis, and data across jurisdictions to help legal, risk, and compliance professionals manage compliance and mitigate global risk. The full Thailand insurance country update is available by subscription to Regulatory Intelligence on the Thomson Reuters website.
June 30, 2026
Insurance specialists from Tilleke & Gibbins have provided an update to the Vietnam chapter of Thomson Reuters’ Practical Law guide to insurance and reinsurance. The guide is a Q&A-style overview of insurance and reinsurance law in jurisdictions worldwide. The Vietnam chapter provides a detailed overview of the legal framework for the insurance and reinsurance market in the country, covering the following issues: Regulatory framework for insurance and reinsurance Authorization for insurers, reinsurers, and insurance intermediaries Ownership restrictions Ongoing requirements Penalties for noncompliance Sales and marketing of insurance and reinsurance Transfer of risk Reinsurance contracts and risks Contracts and policies Claims Dispute resolution Insolvency Tax Practical Law, a legal reference resource from Thomson Reuters, publishes a range of guides for hundreds of jurisdictions and practice areas. The insurance and reinsurance guide is a valuable resource for legal practitioners, covering numerous jurisdictions worldwide. To view the latest version of the guide, please visit the Practical Law website and enroll in the free Practical Law trial to gain full access.
June 5, 2026
Thailand’s Office of Insurance Commission (OIC) has opened a public hearing on proposed amendments to the OIC Notification on Criteria for Information Technology Risk Governance and Management for Life Insurance and Non-Life Insurance Companies B.E. 2563 (2020) via the centralized Law platform. The public consultation period runs from May 8, 2026, to June 9, 2026. The proposed amendments aim to elevate the IT risk governance and cybersecurity risk management framework to be more modern and aligned with international standards, with a focus on strengthening cyber resilience, enhancing the role of IT audits, and establishing data governance and data quality controls. The parties affected by these amendments include life insurance companies, non-life insurance companies, and external IT auditors. Key Changes Elevated Role of Board of Directors The proposed notification requires the company’s board of directors to oversee data governance, cybersecurity, and the responsible use of AI. Additionally, the board should include at least one director with IT knowledge or experience. Companies are also required to designate a head of security responsible for information security. The board’s duties are expanded to include oversight of data governance and AI usage, including establishing relevant policies and committees. Enhanced IT Security and Cybersecurity The revised notification consolidates the existing chapters on IT project management, IT security and cybersecurity to reduce redundancy, and introduces significant new measures. These include mandatory multi-factor authentication for material systems, enhanced data security measures such as data masking and data leakage prevention, security hardening requirements, web filtering, and mandatory vulnerability assessment and penetration testing at least annually. New requirements are also introduced for mobile application security, API security, and security measures for emerging technologies such as cloud computing and post quantum cryptography. The cybersecurity framework now encompasses identification, protection, detection, response, and recovery. The draft also introduces source code review
April 9, 2026
Thailand’s Office of the Insurance Commission (OIC) has published two parallel sets of draft regulatory amendments for public hearing—one governing non-life insurance and the other governing life insurance. The proposed amendments would significantly revise the rules for issuing, offering, and selling insurance policies, as well as the conduct of agents, brokers, and banks. Stakeholders may submit comments until April 25, 2026. The key proposed changes are summarized below. Electronic Policy Delivery by Default Under both draft amendments, electronic delivery would become the default method for delivering insurance policies. A printed copy would be required only if the policyholder expressly opts out, and any such printed copy would be treated as a substitute for the electronic original. For life insurance, this requirement would also extend to coverage summaries and to exclusion documents. The OIC would also retain authority to approve alternative delivery methods for specific types of policies. Misuse of Licenses Both amendments would introduce an explicit prohibition against sales representatives using another person’s name or license, or allowing another person to use their name or license, in connection with the offering of insurance or in sales documentation and policies. Premium Collection Reforms Both amendments would introduce the premium collection reforms outlined below. Premium receipt accounts Insurers must ensure that sales representatives inform customers of the available payment channels, which are limited to channels that remit premiums into the insurer’s account. If a customer pays an insurance premium to an insurer’s employee, an insurance broker, or any other person, and the company acknowledges the payment by issuing an insurance policy or other documentary evidence of insurance coverage, the insurer would be deemed to have received the insurance premium. Written premium collection and refund guidelines Insurers would be required to prepare written internal guidelines covering premium collection and refund policies, risk