You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 21, 2018

Thailand’s OIC Issues New Regulations for Providing Insurance, Effective January 1, 2019

Thailand’s Office of Insurance Commission (the OIC) has issued two sets of requirements—collectively called the OIC Notifications Re: Conditions Relating to Issuing and Offering Insurance Policies of Insurance Companies, and Duties of Non-life Insurance Agents, Brokers and Banks 2018 (the Notifications)—imposing practical new requirements on life and non-life insurance and reinsurance companies in Thailand.

The key provisions are listed below, and are applicable to both life and non-life insurance unless expressly specified otherwise. All provisions come into force on January 1, 2019.

Corporate Culture

  • The board of directors and the executives must produce an internal policy, a business plan, and a business strategy, in writing, for the purpose of promoting tangible and effective fair dealing with customers. These must be rolled out to all of the company’s employees and insurance intermediaries.
  • Companies must conduct risk management in respect of conducting business, exercising fair treatment, and dealing with customers, including:
  • Preparing and developing product wording and premium rates;
  • Advertising and the offering insurance products;
  • Collecting, storing, and securing customers’ personal data;
  • Servicing insureds;
  • Handling claim compensation and monitory benefits according to policies; and
  • Handling complaints.

Conduct in respect to the issuance of insurance products

  • After concluding a sale, companies must issue the policy and send it to the insured with a summary of the coverage and the exclusions. In the case of a group policy, the documents must be sent to the policy holder or the insured. The insured members of the group policy must be provided with an insurance certificate, including a summary of the coverage, the exclusions and the conditions.
  • In the event of a renewal, where there is no change to the coverage and conditions, the company may choose to send a renewal certificate to the policy holder/insured/group members, upon their request, instead of the whole policy. This is not applicable insurance products that the insured is legally required to procure.

Conduct in respect to the issuance of insurance products

  • Conduct in respect to offering insurance products
  • Companies must ensure that their intermediaries comply with the Notifications. If they do not comply, and the intermediary fails to rectify their incompliance, they must be de-authorized no later than seven days from the deadline that the company provides for rectification. The company must notify the OIC of the non-compliance and the outcome.
  • Permitted distribution channels include offering by:
  1. Employees or staff;
  2. Phone (telesales);
  3. Bancassuance;
  4. Post;
  5. Electronic means; and
  6. Other means.

Premium remittances can only be made to the company’s account for products offered through channels (2), (3) and (4).

  • Companies must publicly disclose the details of their intermediaries (e.g. names and license numbers).
  • When offering insurance products, the company/intermediary must:
  • Explain that the information provided in the application must be true and complete and the consequence of incompliance;
  • Clearly identify the insurer, which is the product issuer;
  • Create no disturbance or annoyance to the customer and immediately stop the sale when the customer declines;
  • Provide information about the premium amount, payment period, and insured period (separately from any other financial product offered together in a bundle—customers must be informed of any such bundling);
  • State how the customer information was obtained upon the customer’s request;
  • NOT, in order to procure a sale, induce the insured to cancel another insurance policy; provide untrue or misleading information, or omit any material information; or require the customers to buy insurance as a condition for providing other services.
  • Telesales:
  • The offering must be by employees, staff, agents, brokers, or banks, which have been authorized by the company. Companies must submit the name of authorized persons to the OIC within 7 days of authorization.
  • Calls can only be made from Monday to Saturday between 8.30am and 7.00pm.
  • For non-life products, a minimum 30-day free look period is required, except for compulsory motor and micro-insurance (fire).
  • Calls cannot be made to the customers who have made a “do not call” request for a period of at least six months. Companies must keep a “do not call list” and make it readily available upon request from the OIC.
  • Calls must be recorded, and recordings can only be made with the prior consent of the customers. Telesales scripts must be approved by the company in advance.
  • A confirmation call must be made within seven days.
  • Sales by post
  • Sales can only be made by the company, agent, broker, and bancassurance, and the customer must express their intention to buy the insurance policy by post.
  • The company must provide (and ensure that its intermediaries provide):
  • Name, address, and phone number, by which the company can be contacted;
  • OIC approved product wording;
  • Payment channel and coverage commencement date;
  • Insured term; and
  • Certificate of insurance (if applicable).

The name and the contact details of any intermediaries must also be provided to the customer.

After sales service

Companies must have a complaints system and process, including provisions on policy cancellation and premium refunds.

For advice on how to comply with these new regulations, or for any other information, please contact Athistha (Nop) Chitranukroh on [email protected] or +662 056 5600

RELATED INSIGHTS​ 

June 30, 2026
Tilleke & Gibbins’ insurance specialists in Bangkok provided Thomson Reuters’ latest country update on Thailand’s regulatory framework for the insurance industry. The country update, which is part of Thomson Reuters’ extensive Regulatory Intelligence offerings, contains information and guidance for insurers active in the Thai market. The guide covers the following topics in detail: Permission to operate; Legal and regulatory considerations for domestic and international insurers; Capital reserve requirements; Investment management and markets; The Office of Insurance Commission’s arbitration system for handling complaints; Creditor hierarchy; Rehabilitation of non-life insurance companies; and Personal data protection requirements for insurers. Thomson Reuters Regulatory Intelligence is a service that provides with curated news, analysis, and data across jurisdictions to help legal, risk, and compliance professionals manage compliance and mitigate global risk. The full Thailand insurance country update is available by subscription to Regulatory Intelligence on the Thomson Reuters website.
June 30, 2026
Insurance specialists from Tilleke & Gibbins have provided an update to the Vietnam chapter of Thomson Reuters’ Practical Law guide to insurance and reinsurance. The guide is a Q&A-style overview of insurance and reinsurance law in jurisdictions worldwide. The Vietnam chapter provides a detailed overview of the legal framework for the insurance and reinsurance market in the country, covering the following issues: Regulatory framework for insurance and reinsurance Authorization for insurers, reinsurers, and insurance intermediaries Ownership restrictions Ongoing requirements Penalties for noncompliance Sales and marketing of insurance and reinsurance Transfer of risk Reinsurance contracts and risks Contracts and policies Claims Dispute resolution Insolvency Tax Practical Law, a legal reference resource from Thomson Reuters, publishes a range of guides for hundreds of jurisdictions and practice areas. The insurance and reinsurance guide is a valuable resource for legal practitioners, covering numerous jurisdictions worldwide. To view the latest version of the guide, please visit the Practical Law website and enroll in the free Practical Law trial to gain full access.
June 5, 2026
Thailand’s Office of Insurance Commission (OIC) has opened a public hearing on proposed amendments to the OIC Notification on Criteria for Information Technology Risk Governance and Management for Life Insurance and Non-Life Insurance Companies B.E. 2563 (2020) via the centralized Law platform. The public consultation period runs from May 8, 2026, to June 9, 2026. The proposed amendments aim to elevate the IT risk governance and cybersecurity risk management framework to be more modern and aligned with international standards, with a focus on strengthening cyber resilience, enhancing the role of IT audits, and establishing data governance and data quality controls. The parties affected by these amendments include life insurance companies, non-life insurance companies, and external IT auditors. Key Changes Elevated Role of Board of Directors The proposed notification requires the company’s board of directors to oversee data governance, cybersecurity, and the responsible use of AI. Additionally, the board should include at least one director with IT knowledge or experience. Companies are also required to designate a head of security responsible for information security. The board’s duties are expanded to include oversight of data governance and AI usage, including establishing relevant policies and committees. Enhanced IT Security and Cybersecurity The revised notification consolidates the existing chapters on IT project management, IT security and cybersecurity to reduce redundancy, and introduces significant new measures. These include mandatory multi-factor authentication for material systems, enhanced data security measures such as data masking and data leakage prevention, security hardening requirements, web filtering, and mandatory vulnerability assessment and penetration testing at least annually. New requirements are also introduced for mobile application security, API security, and security measures for emerging technologies such as cloud computing and post quantum cryptography. The cybersecurity framework now encompasses identification, protection, detection, response, and recovery. The draft also introduces source code review
April 9, 2026
Thailand’s Office of the Insurance Commission (OIC) has published two parallel sets of draft regulatory amendments for public hearing—one governing non-life insurance and the other governing life insurance. The proposed amendments would significantly revise the rules for issuing, offering, and selling insurance policies, as well as the conduct of agents, brokers, and banks. Stakeholders may submit comments until April 25, 2026. The key proposed changes are summarized below. Electronic Policy Delivery by Default Under both draft amendments, electronic delivery would become the default method for delivering insurance policies. A printed copy would be required only if the policyholder expressly opts out, and any such printed copy would be treated as a substitute for the electronic original. For life insurance, this requirement would also extend to coverage summaries and to exclusion documents. The OIC would also retain authority to approve alternative delivery methods for specific types of policies. Misuse of Licenses Both amendments would introduce an explicit prohibition against sales representatives using another person’s name or license, or allowing another person to use their name or license, in connection with the offering of insurance or in sales documentation and policies. Premium Collection Reforms Both amendments would introduce the premium collection reforms outlined below. Premium receipt accounts Insurers must ensure that sales representatives inform customers of the available payment channels, which are limited to channels that remit premiums into the insurer’s account. If a customer pays an insurance premium to an insurer’s employee, an insurance broker, or any other person, and the company acknowledges the payment by issuing an insurance policy or other documentary evidence of insurance coverage, the insurer would be deemed to have received the insurance premium. Written premium collection and refund guidelines Insurers would be required to prepare written internal guidelines covering premium collection and refund policies, risk