You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

March 3, 2021

Thailand’s Draft Insurance Regulatory Sandbox Guidelines Open to Public Comments

The Office of Insurance Commission (OIC) is seeking public comments on their recently released draft guidelines on Thailand’s insurance regulatory sandbox. Once enacted, the draft notification will replace the existing OIC insurance regulatory sandbox notification, aiming to broaden the OIC’s authority in order to erase difficulties in the project approval process that have arisen under the current notification.

One major change included in this draft notification is that business operators are no longer allowed to conduct “own sandbox” testing. Unlike the notification currently in effect, the new draft notification also does not specify the criteria and procedures for a business operator to apply for a temporary allowance of non-compliance with non-material, test-obstructing requirements in a notification or order from the OIC or the registrar.

Participants

Eligible participants in the insurance regulatory sandbox—which include life and non-life insurance companies, life and non-life brokers, and other types of business operators with expertise in technology—must have appropriate capital, systems, personnel, and experience for the planned provision of service.

Participants in the sandbox must establish measures to ensure that insured parties will receive sufficient information in relation to the project, and a remedial plan must be in place in case of damage arising from errors connected to the project. These measures are similar to those in the existing OIC notification, which requires that such measures must at least cover consumer protection, risk management, reporting obligations, and compliance with applicable laws.

Project Requirements

The draft notification reduces the number of eligible sandbox project types allowed under the existing OIC notification. When the draft notification is enacted, projects that risk regulatory incompliance, and projects that may adversely affect consumers, financial stability, or trust in an insurance company or the industry as a whole, will no longer be allowed to participate in the insurance regulatory sandbox.

In addition, applicants to participate in the insurance regulatory sandbox must provide the following project details:

  • A clear framework, scope, and expected results for the project, with the objective of offering new innovations to consumers in Thailand;
  • A report showing the potential outlook of the innovation that will be tested in the sandbox, including the relevant risks and risk management measures; and
  • A project plan for the process after the end of the sandbox testing (both for a successful test and for an unsuccessful one).

According to the draft notification, the project must comply with other applicable regulations prescribed by the OIC and must not be contrary to public order and good morals. The innovation and technology to be used in the sandbox must be either:

  • beneficial to the entire insurance industry, the development of the insurance industry, or consumers; or,
  • in response to a regulation that requires a business operator to have the relevant innovation or technology tested in the sandbox. If the innovation or technology to be tested involves a premium rate, the rate must be approved by the registrar and must be consistent with the expenses, expected damages, and principles of actuarial science.

The maximum allowable duration for each project is one year. An additional one-year extension can be sought from the OIC by submitting a request at least 30 days prior to the scheduled end of the project.

We will continue to monitor the development of this draft notification and note any significant developments. For more details, please contact Athistha (Nop) Chitranukroh ([email protected]), Sappaya Surakitjakorn ([email protected]), or Thammapas Chanpanich ([email protected]).

RELATED INSIGHTS​ 

June 24, 2025
Insurance specialists from Tilleke & Gibbins in Bangkok have contributed the Thailand chapter to the newly released 2025 edition of Thomson Reuters’ Practical Law guide to insurance and reinsurance. The Thailand chapter offers a comprehensive Q&A-style overview of the legal and regulatory framework governing insurance and reinsurance in the country. It provides key insights for businesses, insurers, reinsurers, and intermediaries operating in or entering the Thai market. Key topics covered include: Market structure and common types of insurance; Regulatory framework and oversight by the Office of Insurance Commission (OIC); Authorisation requirements for insurers, reinsurers, and intermediaries; Ownership restrictions and foreign investment rules; Corporate governance, capital requirements, and solvency obligations; Reinsurance arrangements, including fronting, risk transfer, and common contractual clauses; Policy content requirements, standard clauses, and consumer protections; Claims procedures, statutory time limits, and subrogation rights; Dispute resolution mechanisms, including OIC arbitration and court proceedings; Insolvency protections for policyholders; Tax treatment of insurance and reinsurance businesses in Thailand; Recent legal developments, including pending amendments to the Life and Non-Life Insurance Acts and updated OIC regulations on reinsurance and investment activities. The 2025 edition reflects Thailand’s evolving regulatory environment, including proposed legislative reforms to strengthen corporate governance, risk-based capital requirements, and financial stability in the insurance sector. It also highlights practical considerations for foreign insurers, reinsurers, and intermediaries seeking to participate in Thailand’s insurance market. Tilleke & Gibbins contributes regularly to the Practical Law series of guides for various jurisdictions in Southeast Asia, providing trusted legal insight for multinational companies. To access the latest Thailand chapter of the insurance and reinsurance guide, please visit the Practical Law website and enroll in the free Practical Law trial to gain full access.
May 28, 2025
Tilleke & Gibbins attorneys in Vietnam have contributed the 2025 edition of Doing Business in Vietnam, a comprehensive Q&A-style resource from Thomson Reuters Practical Law that provides essential insights for companies navigating business operations in Vietnam. The guide presents a detailed overview of the country’s legal framework and regulatory environment, reflecting recent updates in Vietnamese legislation and practice. This annually updated guide offers key information on the following areas: Legal system: Structure of the Vietnamese judiciary and the role of codified law. Foreign investment: Conditions for market access, licensing requirements, foreign ownership restrictions, and investment incentives. Business vehicles: Formation and operation of legal entities, including limited liability companies, joint-stock companies, and representative offices. Employment: Employment contracts, social insurance, labor rights, and procedures for hiring foreign nationals. Tax: Overview of corporate income tax, personal income tax, value-added tax, and other tax obligations. Intellectual property: Procedures for protecting and enforcing patents, trademarks, copyrights, and other IP rights. Data protection: Compliance requirements under Vietnam’s data privacy laws, including the Personal Data Protection Decree. Competition law: Antitrust rules and regulatory oversight under the Law on Competition. Anti-bribery and corruption: Legal framework and enforcement practices aimed at curbing corrupt activities. E-commerce and digital business: Regulations governing online platforms, digital content, and cross-border services. Marketing and advertising: Laws and guidelines on advertising standards and consumer protection. Product regulation and liability: Safety requirements, product liability issues, and roles of relevant authorities. Doing Business in Vietnam is part of Practical Law’s global series of legal guides designed to support international practitioners and businesses. To access the most recent edition of the Vietnam guide, visit the Practical Law website and sign up for a free trial.
May 2, 2025
Attorneys from Tilleke & Gibbins have updated the latest edition of Doing Business in Thailand, a Q&A-style guide from Thomson Reuters Practical Law that offers an overview of key legal considerations for companies operating in jurisdictions worldwide. The contribution outlines the country’s legal and regulatory framework for foreign investment and business operations and reflects the latest legislative developments. The chapter addresses the following core topics: Legal system: Structure of the courts and the codified nature of Thai law. Foreign investment: Business restrictions under the Foreign Business Act, sector-specific regulations, exchange control rules, and investment incentives. Business vehicles: Overview of partnerships, private and public limited companies, and other legal entities. Employment: Labor protections, employment contracts, foreign worker requirements, and termination procedures. Tax: Corporate and personal income tax, indirect taxes, and tax obligations for residents and non-residents. Intellectual property: Registration and enforcement of patents, trademarks, designs, and copyrights. Data protection: Key provisions of the Personal Data Protection Act and related compliance obligations. Competition law: Regulatory framework under the Trade Competition Act. Anti-bribery and corruption: Relevant legislation and enforcement mechanisms. E-commerce and digital business: Legal regime for online transactions and digital platforms. Marketing and advertising: Consumer protection laws and regulations affecting advertising and marketing practices. Product regulation and liability: Safety standards, liability regimes, and roles of enforcement authorities. Practical Law, a legal reference resource from Thomson Reuters, publishes a range of guides for hundreds of jurisdictions and practice areas. The insurance and reinsurance guide is a valuable resource for legal practitioners, covering numerous jurisdictions worldwide. To view the latest version of the guide, please visit the Practical Law website and enroll in the free Practical Law trial to gain full access.
April 29, 2025
On April 11, 2025, Thailand’s Office of Insurance Commission (OIC) released draft principles for two notifications for public comment, open until the end of April. These aim to amend the OIC Notifications on Guidelines for Customer Personal Data Protection for life and non-life insurance businesses, which were issued in 2021. Key Principles Both life and non-life insurance companies will be required to obtain consent for the following processing activities: Processing of general personal data: When requesting the OIC to disclose information related to a customer’s insurance policy for the purpose of underwriting or claims consideration. Processing of sensitive personal data: When requesting the OIC to disclose information related to a customer’s insurance policy for the purpose of underwriting or claims consideration; and When requesting the OIC to disclose information about a customer’s insurance fraud behavior for fraud monitoring, fraud risk management, and assessing and preventing insurance fraud risk for underwriting or claims payment. The consent for the above processing activities must be in accordance with the consent requirements prescribed by the OIC, and the disclosure of personal data must also comply strictly with the conditions set by the OIC. Life insurance companies may obtain consent for other purposes as long as they comply with Thailand’s Personal Data Protection Act B.E. 2562 (2019), and companies will be liable in the event of a personal data breach. Additional Principles for Non-Life Insurance Businesses Non-life insurance companies will be required to provide a privacy notice and a summary of the privacy notice for each type of insurance policy in accordance with the form prescribed by the OIC. The privacy notice and its summary must be provided prior to or at the time of offering insurance policies, or together with the consent form for data processing through any channels used for offering insurance.