You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

July 19, 2022

Thailand’s SEC Opens Public Hearing Period on ICO Portal Regulations

Subscribe to Updates

On June 23, 2022, Thailand’s Securities and Exchange Commission (SEC) opened a public hearing period on regulatory controls for initial coin offering (ICO) portals that serve as financial advisors to digital token issuers. The proposed measures aim to prevent conflicts of interest; allow ICO portals to outsource certain functions; and establish additional notification obligations for ICO portals.

The public hearing is open for general comments until July 23, 2022, and the new legislation is expected to be issued soon after that. During the public hearing period, any interested parties can comment on the SEC’s proposed principles. The key proposed points are outlined below.

Conflicts of Interest

Similar to SEC-approved financial advisors for securities offerings, ICO portals must be clear of conflicts of interest when representing issuers in a coin offering. According to the draft regulation, the following conflicts of interest are prohibited:

  • The ICO portal (and certain individuals as specified by the SEC) directly or indirectly holds a prohibited amount of shares in the issuer, its affiliates, or its subsidiaries. If the issuer is not a listed company, any shareholding or portion thereof is prohibited. If the issuer is a listed company on the Stock Exchange of Thailand (SET), the shares held by the ICO platform may not total more than five percent of the total voting rights.
  • The issuer (and certain individuals as specified by the SEC) directly or indirectly holds shares in the ICO portal in any amount if the ICO portal is not a listed company, or totaling more than five percent of the voting rights if the ICO portal is listed on the SET.
  • Any of the ICO portal’s directors or executives, or the head of the department responsible for screening the ICO project, is also a director in the issuer.
  • The ICO portal has a relationship with, or any interest in, the issuer in a way that could impede the independence of the ICO portal with respect to conducting its duties.

Outsourcing ICO Portal Functions

To increase efficiency, ICO portals will be allowed to outsource certain tasks, subject to the following conditions:

  • The ICO portal must adopt an outsourcing policy, measures, and procedures (approved by the board of directors), to be reviewed annually or upon any event that might have a material impact on business operations.
  • The scope of outsourced tasks must be appropriate, reasonable, and not so substantial that the ICO portal will become an entity with no business operations (an “empty box”). ICO portals may only outsource tasks relating to digital token offerings, such as contacting and providing services to investors, and supporting digital token offerings and subscription management. Core tasks, such as screening ICO projects, may not be outsourced.
  • The ICO portal must notify the SEC within 15 days when it outsources a task to a third party, when there is a significant change to the outsourcing, or when the third party subcontracts any task to another party.

Additional Notification Obligations

To facilitate additional supervisory control, ICO portals will have to notify the SEC within 15 days if there are any changes to their qualifications, personnel, and functions, or if the ICO portal is unable to maintain the necessary qualifications or comply with the requirements detailed in the relevant section of SEC Notification No. GorJor. 16/2561 Re: Criteria, Provisions, and Procedure for Approval of an ICO Portal Service Provider. In the notification, the ICO portal must identify the cause and report on any remedial measures planned or already taken.

If an ICO portal wishes to suspend operations, it must also notify the SEC and provide a list of unfinished tasks along with a plan to mitigate any potential impact on customers. When the ICO portal wishes to resume operations, it must again notify the SEC and explain how it has resolved the issues that caused the suspension of operations, along with any significant changes to the portal’s characteristics.

Tilleke & Gibbins will continue to monitor these ICO portal regulations and provide updates as needed. For more information on any aspect of digital asset business, cryptocurrency, digital tokens, or digital asset regulations in Thailand, please contact Kobkit Thienpreecha at [email protected], Onunya Chanpen at [email protected], or Sorawit Partomtanasarn at [email protected].

Related Professionals

Industries

Fintech

Technology

Practices

Banking and Finance

Location

RELATED INSIGHTS​ 

January 6, 2026
Among the eight implementing decrees issued on December 18, 2025, to provide the legal framework for Vietnam’s new International Financial Centers (IFC), Decree No. 323/2025/ND‑CP serves the core function of officially establishing the IFC as a unified entity in two locations—Ho Chi Minh City and Da Nang—and setting out a plan for its development and governance. The key contents of the decree are summarized below. Location and Focus of IFCs The Vietnam International Financial Center in Ho Chi Minh City (VIFC‑HCMC) and the Vietnam International Financial Center in Da Nang (VIFC‑DN) are designed to attract capital, fintech, and international market participants under a dedicated regulatory framework. The IFCs will host functional zones for financial trading, banking, securities and commodities exchanges, offices, dispute resolution (via specialized court and international arbitration center), and related activities as set by the executive authority of each IFC. VIFC-HCMC, with a total area of 898 hectares in central Ho Chi Minh City, is oriented to develop a comprehensive and diverse financial ecosystem, providing traditional and specialized financial services, and leveraging synergies between financial services such as capital mobilization, investment, payment services, issuance and trading of financial products, asset management, fintech, and green financial services. VIFC-DN, with a total area of 300 hectares, is oriented to develop as a modern IFC, closely integrated with the innovation ecosystem, digital technology, and sustainable finance. VIFC-DN will establish a controlled testing platform for new financial models, taking the lead in the deployment and scaling of digital-asset products, digital payments, and specialized trading platforms and exchanges, while promoting supply chain finance, third-party services, and non-bank financial intermediaries to complement and support the traditional financial market, developing specialized, flexible, and innovative financial products. Near‑Term Priorities and Review Timeline In 2026, the government will prioritize completing the essential infrastructure and ensuring adequate
Read More
January 5, 2026
On December 31, 2025, the government of Vietnam promulgated Decree No. 356/2025/ND-CP detailing and guiding the implementation of the new Personal Data Protection Law (PDPL) that was issued in June 2025. The new decree, like the PDPL, entered into force on January 1, 2026, with the previous Decree No. 13/2023/ND-CP on personal data protection ceasing effect on the same day. Some key points of the new decree include the following: Comprehensive lists of basic and sensitive personal data are provided, which will require companies to review again their existing documents and data type classification to ensure compliance. New timelines are established for responding to specific data subject requests. These timelines are more reasonable and longer than the previous 72-hour requirements. Additional consent guidelines are provided, prohibiting default consent or ambiguous instructions that confuse data subjects about giving or withholding consent. Mandatory content for data transfer agreements/clauses in particular cases is provided. This covers, among other things, (i) the legal basis for the transfer of personal data; (ii) responsibilities for personal data protection during the transfer and processing of personal data; (iii) responsibilities for ensuring the exercise of the rights of personal data subjects; and (iv) responsibilities for coordination and compliance of the parties in cases where violations of personal data protection regulations are detected. The qualifications and responsibilities of data protection officers (DPOs) and data protection departments include, among others, having been trained and fostered in legal knowledge and professional skills regarding personal data protection. There are no specific provisions governing the qualifications or requirements for organizations that provide data protection training or education. New mandatory templates and requirements are provided in relation to data processing impact assessment and data transfer impact assessment, and for cases in which companies need to re-submit assessments to the regulator. Stricter requirements are
Read More
January 5, 2026
Resolution No. 222/2025/QH15 dated June 27, 2025, of the National Assembly of Vietnam (the “IFC Resolution” – see our previous article) set out the foundational legal framework for the establishment and development of Vietnam’s first-ever International Financial Centers (IFC). In furtherance of this framework, on December 18, 2025, the government of Vietnam issued eight implementing decrees to provide detailed regulatory guidance and to operationalize the IFC Resolution in practice. The Eight Implementing Decrees: An Integrated Regulatory Ecosystem The new decrees governing the IFC include the following: Decree No. 323/2025/ND-CP on the establishment of the IFC. Decree No. 324/2025/ND-CP on financial policies applicable within the IFC. Decree No. 325/2025/ND-CP on labor, employment, and social security within the IFC. Decree No. 326/2025/ND-CP on land and environmental matters within the IFC. Decree No. 327/2025/ND-CP on entry, exit, and residence of foreign nationals in the IFC. Decree No. 328/2025/ND-CP on the International Arbitration Center of the IFC. Decree No. 329/2025/ND-CP on banking licensing, foreign exchange management, and anti-money laundering and combating the financing of terrorism (AML/CFT) within the IFC. Decree No. 330/2025/ND-CP on the establishment and operation of commodity exchanges within the IFC. Taken as a whole, these eight decrees translate the IFC Resolution into a coherent and fully operational legal regime governing the establishment, organization, and functioning of Vietnam’s IFC. Collectively, they demonstrate that Vietnam’s IFC framework is best understood not as a collection of isolated incentives, but as a deliberately designed and integrated regulatory system. The Legal Architecture of the IFC: Four Interlocking Pillars Read together, the decrees seem to be designed to address four core regulatory questions from the outset: (i) what the IFC is, from a legal and institutional perspective; (ii) who may participate in the IFC and what activities are permitted; (iii) how people, capital, and projects operate
Read More
December 30, 2025
On December 17, 2025, Laos’ Ministry of Industry and Commerce (MOIC) issued a notice introducing a new digital system that allows e-commerce businesses to obtain required certificates and licenses through an online, application-based platform. Notice No. 3988, which will take effect on February 1, 2026, introduces the E-Trust platform, a downloadable application that allows e-commerce businesses to remotely obtain acknowledgement certificates and business operating licenses. New Digital Registration Options Under the previous framework established by the Decree on E-commerce (2021), businesses were required to complete registration exclusively through paper-based submissions. The new system now offers businesses two registration options: Traditional paper-based process at the Division of E-commerce Management within the MOIC; or Electronic registration and renewal through the E-Trust platform. This change is expected to streamline procedures, reduce administrative burdens, and enhance accessibility for businesses operating outside Vientiane. The E-Trust platform facilitates compliance for both individuals and legal entities required to submit applications and renewals for required certificates and licenses. The development is particularly beneficial for businesses located in remote provinces, as it eliminates the need for physical travel and significantly accelerates processing times. Compliance Requirements and Penalties Businesses must obtain or renew the required certificates and licenses to avoid sanctions under the Decision on Fines and Other Measures for Violation of the Decree and Regulations on E-commerce (No. 2828/MOIC, dated November 11, 2025). Penalties for noncompliance may include monetary fines and other enforcement measures.
Read More