You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

October 3, 2025

Thailand’s Beauty Industry Gets a Makeover with New Contract Standards

Subscribe to Updates

On September 26, 2025, the Contract Committee under Thailand’s Consumer Protection Board issued a regulation that aims to standardize contracts and enhance consumer protection within the beauty and wellness industry. The Notification on Prescribing the Beauty Service Business as a Contract-Controlled Business B.E. 2568 (2025), which takes effect on January 24, 2026, requires business operators to use a prescribed standard contract in Thai and adhere to strict mandatory provisions and prohibitions.

These regulations apply to operators across all in-person and online service channels, including via digital platforms. “Beauty services business” is defined as the provision of services under an agreement allowing consumers to receive a series of treatments, either over a set number of sessions or within a set period. This includes massage, spa, other methods for cleanliness, beauty, or care of facial or body skin, and weight control and body shaping—including services offered electronically. The law excludes surgery, liposuction, and medical treatments performed by licensed practitioners.

The notification establishes the following key requirements:

  • Mandatory contract and formatting. All contracts with consumers must use the standard contract form, in Thai, with clear, readable text (minimum font size of 2 millimeters, no more than 11 characters per inch), and include all essential terms from the annexed form.
  • Contract execution. Contracts must be made in duplicate, with one copy given to the consumer at signing. For agreements concluded through electronic channels, the process must comply with the Electronic Transactions Act and use the same required terms.
  • Digital platforms. Business operators who provide services facilitated through a digital platform as an intermediary are ultimately responsible for ensuring the consumer receives a compliant contract.
  • Prohibited clauses. The law prohibits clauses that limit or exclude liability for damages to life, body, health, mind, or property resulting from breach of contract or a wrongful act; bind consumers to business operators’ rules without consent; allow unilateral changes to services or fees; permit termination without notice or cause; forfeit prepayments; prohibit termination or refunds; impose no-refund; policies; automatically renew contracts; or misuse personal data in violation of the Personal Data Protection Act.
  • Key required contractual terms. The standardized contract template imposes a mandatory structure requiring the inclusion of clear and specific terms designed to safeguard consumer rights. Business operators are obliged to adopt and implement the required information in their service agreements. The Contract Committee’s recent notification contains an extensive list of terms and details that must be included in contracts.

To stay compliant and protect consumer trust, business operators must update their contracts to the new standardized form, eliminate any prohibited clauses, and ensure that electronic and platform-based agreements fully adhere to the new regulations. Embracing these changes is essential for maintaining credibility and thriving in Thailand’s evolving beauty and wellness industry.

Related Professionals

Industries

Consumer Products

Life Sciences

Technology

Practices

Antitrust and Competition

Regulatory Affairs

Location

RELATED INSIGHTS​ 

December 23, 2022
On December 15, 2022, Thailand’s Personal Data Protection Committee (PDPC) issued the Notification on the Criteria and Procedures for Handling Personal Data Breaches. What Constitutes a “Data Breach”? A “personal data breach” refers to a breach of security measures that causes unlawful or unauthorized loss, access, use, modification, or disclosure of personal data, resulting from an intentional, willful, negligent, accidental, unauthorized, or unlawful act, or an act related to computer crimes, cyber threats, mistakes or accidents, or any other act. The notification also classifies personal data breaches into three categories: confidentiality breach, integrity breach, and availability breach. Upon being informed of an actual or suspected personal data breach, a data controller must take the following actions: To the extent possible, assess the reliability of the information and investigate the facts related to the personal data breach, including all aspects concerning security measures, such as organizational measures, technical measures, and physical measures; Conduct a data breach assessment to consider whether the personal data breach is likely to result in a risk to an individual’s rights and freedom; Notify the Office of the PDPC, any affected data subjects, or both as required; and Take necessary and appropriate action to prevent further consequences resulting from the personal data breach. Breach Assessment When conducting a data breach assessment, the following factors must be taken into account if there is a risk to an individual’s rights and freedom. Nature and the type of data breach; Nature, type, and volume of personal data involved; Nature, type, and status of the affected data subject; Severity of the consequences of the personal data breach for any affected data subjects, and the effectiveness of the measures taken to prevent the data breach; Impact of the data breach on the operation of the business or on the public; Storage
Read More
December 22, 2022
Rules for franchising in Indonesia were first published in 1997 through a government regulation and a ministerial decree, which was subsequently amended several times. The franchising regulations currently in effect are Government Regulation No. 42 of 2007 concerning Franchises and Regulation issued by the Minister of Trade No. 71 of 2019 concerning the Implementation of Franchising (MOT No. 71 of 2019). Franchises in Indonesia must meet certain criteria that distinguish them from other types of businesses, and franchising must be based on a franchise agreement governed by Indonesian law. Prior to entering into a franchise agreement, a franchisor must provide a prospectus (disclosure document) to the prospective franchisee at least two weeks before the execution of the franchise agreement so that the prospective franchisee has sufficient time to review the reputation and goodwill of the franchisor through the prospectus. The prospectus must contain various details about the franchise business, its management, its operations, and other relevant aspects. Both local and foreign franchisors must obtain a franchise registration certificate—referred to as an STPW—from the Ministry of Trade before offering their franchises to prospective franchisees. The franchisee is also required to obtain an STPW. The STPW for the franchisor is the proof of prospectus registration, while the STPW for the franchisee is the proof of registration of the franchise agreement. Franchisors and franchisees who have STPWs are required to submit reports on franchise business activities to the Ministry of Trade’s director of business development and distribution by the end of June each year. Up to three written warnings will be served on a franchisor or franchisee who does not comply with the registration requirements. A fine of up to IDR 100 million (approx. USD 6,400) will be imposed if the franchisor or franchisee fails to respond to the warnings. MOT No.
Read More
December 19, 2022
On November 22, 2022, the Thai cabinet approved in principle the draft Liability for Defective Goods Act (the “Bill”) proposed by the Office of the Consumer Protection Board. While Thailand’s Product Liability Act B.E. 2551 (2008) deals with liability to consumers arising from unsafe products, the draft Liability for Defective Goods Act aims to ensure that consumers are well protected from defects in appliances and vehicles that might not initially be easily visible or noticed. Key Definitions The Bill applies most notably to business operators and consumers. In the Bill, a “business operator” who may potentially be liable is: a manufacturer (or its hirer) of goods for sale; or a consignee or importer who brings goods into Thailand for sale; or a seller or a hire purchase provider who cannot identify the manufacturer (or its hirer) or the importer. As opposed to the Product Liability Act, which clearly provides that all business operators in the supply chain must be jointly liable, the Bill lacks such clear guidance. This could be interpreted as meaning that under the current Bill only the business operator at the top of the supply chain who is sued in the same case as other business operators is responsible. A “consumer” is defined as a purchaser or hirer of goods from a manufacturer, including an assignee or successor of the goods from the purchaser or hirer. Scope and Application The Bill is intended to govern purchase or hire-purchase contracts for: electric appliances; electronic devices; personal cars and motorcycles; other goods that may be set out in a future royal decree issued under the act. The Bill will not apply to any purchase or hire purchase of used products or as-is products when this is clearly stated by the seller or hire-purchase provider or the auctioneer in
Read More
December 2, 2022
On November 11, 2022, Myanmar’s Ministry of Commerce (MOC) announced a pilot period for importing electric vehicles into Myanmar, which came into force with MOC Order No. 62/2022, issued under the Import and Export Law. A separate order (No. 61/2022) issued on the same day specifies rules for importation of motorcycles by companies that do not have a certificate to open a showroom, as well as rules for opening motorcycle showrooms. Electric Vehicle Importation According to the order, which takes effect January 1, 2023, “electric vehicles” includes only battery electric vehicles (BEVs) for both personal use and passenger use. In order to import electric vehicles into Myanmar without having a certificate to open a showroom, companies must: Be registered as a company, either wholly owned by nationals or a joint venture, at the Directorate of Investment and Company Administration (DICA); Be able to present the purchase and sales agreement for each brand of imported electric vehicles; Receive approval from the National Steering Committee for Development of Electric Vehicles and Associated Businesses, and import according to the quality and quantity of electric vehicles permitted by the committee; Arrange the necessary warranty, spare parts availability, and after-sales service for the imported electric vehicles; Deposit a bank guarantee of MMK 50 million at a bank recognized by the Central Bank of Myanmar; and Apply for a purchase permit at the MOC, for the purpose of registering the imported vehicles with the Road Transport Administration Department. BEV Tax Exemption Following MOC Order No. 62/2022, BEVs and their batteries are now exempted from commercial tax and special goods tax, which came into force with the Law Amending the Union Tax Law 2022 (State Administrative Council Law No. 48/2022) dated November 17, 2022. These tax exemptions will be effective from October 1, 2022, to March
Read More