You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

June 30, 2022

Thailand’s SEC Proposes to Regulate Ready-to-Use Utility Tokens

On May 30, 2022, Thailand’s Securities and Exchange Commission (SEC) announced that it would start regulating ready-to-use utility tokens, a type of digital token that had previously been exempted from the SEC’s approval and regulatory control. A public forum was open for comments from various stakeholders until June 29, 2022, and the draft regulation is expected to be issued soon.

So far, the SEC has only supervised the issuance of not-ready-to-use utility tokens—digital tokens with the underlying right to acquire specific goods or services, which cannot be utilized upon issuance but at a later date. Due to the growing digital asset industry and lack of regulatory control, ready-to-use utility tokens have become more popular and many are listed for trading in digital asset exchanges.

The SEC claimed that it is now necessary to regulate ready-to-use utility tokens as some issuers appeared to be exploiting the regulatory loophole to manipulate the price and supply of these tokens in both the primary and secondary markets, while providing insufficient data disclosure to investors.

The SEC’s proposed principles include the following key points:

Pre-Approval Requirements

The same pre-approval requirement applicable to not-ready-to-use utility tokens will apply to ready-to-use utility tokens which an issuer intends to list on a digital asset exchange. This means that the issuer must proceed with the standard formalities, i.e., obtaining prior approval from the SEC, filing a draft prospectus, and offering the approved tokens via a SEC-approved ICO portal operator only.

The SEC offers a fast-track (15 days) approval for qualifying ready-to-use utility tokens, which are those with plain-vanilla characteristics; with an offering price corresponding to the value of the underlying goods/services; for which the supply of goods and services does not vary with the price of the tokens (i.e., fixed coins); and which are not intended to be means of payment.

The SEC also sets out exemptions to the pre-approval requirements. The exempt tokens are primarily those which the issuer does not intend to list on a digital asset exchange, and must meet the same qualifications required for fast-track approval.

Additional Ongoing Disclosure Obligations

Issuers of ready-to-use utility tokens will be subject to the following disclosure obligations:

  • Pre- and post-offering disclosure of information such as the rights and benefits of token holders, the project’s business plan, turnover, smart contract source code, and financial statements.
  • Ad hoc disclosure (ongoing disclosure) of material changes to the rights and benefits attached to the token and any information or news which may impact the price of the token.
  • If the project allows for the staking of digital tokens, it is required to disclose information pertaining to the source of the return from such staking. However, in any case, the staking token must not be used to control supply/demand and the price of the tokens.

Allotment of Issuance and Holding by Affiliated Persons

Issuers must not hold ready-to-use utility tokens or allocate ready-to-use utility tokens to affiliated persons in excess of the specified percentage.

Issuers and affiliated persons also must not sell or distribute ready-to-use utility tokens to other people for a specified period of time (silent period).

Amendment of Market Rules of Exchanges

The listing rules, trading rules, and market surveillance supervision of digital asset exchanges will be revised in respect of ready-to-use utilities tokens so that they are suitable for the related risks and to prevent information asymmetry among investors, as well as liquidity risks and unfair treatment.

RELATED INSIGHTS​ 

August 27, 2026
The Bank of Thailand (BOT) is seeking public feedback on a proposed overhaul of the regulatory framework for licensed money changers authorized by the finance minister, under the Exchange Control Act, to buy and sell foreign banknotes separately from commercial banks and specialized financial institutions. The BOT published the draft principles on August 19, 2026, for public consultation, with comments accepted through September 18, 2026. If adopted in its current form, the new framework would substantially raise licensing standards, require existing licensees to undergo a review and upgrade process, temporarily freeze new applications in 2027, and reduce application intake rounds from 2028 onward, with significant implications for both existing operators and prospective new entrants. The overhaul initiative stems from the BOT’s recognition of a need to prevent the use of licensed money changers as channels for financial crime. The stated objectives are to build public confidence, ensure the safety of financial service users, and align the supervisory framework with the current risk profile of the business and evolving market conditions. Upgraded Licensing Standards The BOT intends to significantly revise the licensing framework, including requirements relating to registered capital, branch management, operational standards, and customer transaction limits. Detailed criteria have not yet been released and are expected to be subject to further consultation. All existing licensees will be required to upgrade to meet the new standards and submit evidence of compliance for BOT review on a case-by-case basis. Existing licensees that are unable to satisfy the upgraded requirements may face regulatory consequences, subject to the final framework and BOT review process. Freeze and Reopening The BOT will temporarily stop accepting new license applications throughout 2027 to focus resources on inspecting and upgrading existing money changers. Any party wishing to obtain a new money changer license must submit its application by
August 25, 2026
Vietnam has enacted a new decree establishing administrative penalties for violations in the fields of cybersecurity and personal data protection. Decree No. 330/2026/NĐ-CP (Decree 330), issued and effective from August 19, 2026, provides a detailed sanctions framework for noncompliance with the Law on Personal Data Protection (including its implementing regulations under Decree 356/2025/ND-CP) and the Law on Cybersecurity, together with their guiding decrees. The issuance of Decree 330 signals that the practical grace period previously perceived by many businesses may be drawing to a close, with active regulatory enforcement in these areas expected to commence in earnest. Scope and Key Provisions Decree 330 has extraterritorial effect and applies to both onshore and offshore companies. For offshore companies, it applies to those that (1) provide telecommunications, internet, online-content, information-technology, cybersecurity, or cross-border services and (2) are involved in or related to the processing of personal data of Vietnamese citizens and certain other people of Vietnamese origin. Decree 330’s key provisions cover the following areas: Administrative penalties for violations relating to the protection of national security and public order in cyberspace, including the dissemination of unlawful, false, or unverified information. Sanctions for cyberattacks, unauthorized access, introduction of harmful code or programs, and failure to cooperate with specialized cybersecurity forces. Sanctions for personal data protection violations, such as consent, cross-border data transfers, impact assessments, breach notification, and data-subject rights, among others—with maximum fines of up to 5% of an organization’s preceding-year revenue for cross-border transfer violations, or up to VND 3 billion for other data-protection breaches. Personal Data Protection Penalties The key sanctions for personal data protection violations are as follows: Consent violations: Fines of up to VND 70 million (approx. USD 2,642), plus potential additional sanctions and remedial measures including irreversible deletion of personal data collected without consent and confiscation of
August 25, 2026
Thailand’s Electronic Transactions Development Agency (ETDA) is studying potential new regulatory measures for digital platform services that could significantly expand the country’s digital platform governance framework. The ETDA has already conducted one public consultation session on the proposed measures and will hold additional sessions on August 25 and September 2, 2026, covering five types of platform services under the Royal Decree on Digital Platform Services B.E. 2565 (2022). The measures under study are preliminary and may be changed based on consultation outcomes. Foundational Measures Applicable to All Platform Types Seven baseline obligations would apply across all digital platform categories: Transparency reports. Platforms must prepare and publish statistical reports on platform governance activities, including the number of content items removed or restricted and appeal outcomes, in a comparable format. Notice and action mechanism. Platforms must establish minimum standards for channels to report potentially illegal content or goods, conduct case-by-case review, provide explanations when content is removed or restricted, and maintain an internal appeals channel. Rights over automated decision-making. Users significantly affected by automated decisions are granted rights to request an explanation, request human review, and contest the decision. Service level agreements (SLAs). Platforms must publish minimum standards for response times, processing timelines, progress notifications, and remedies for incidents on the platform. Labeling of AI-generated content. Content generated or modified by AI must carry visible labels and machine-readable metadata, with exceptions for creative works that disclose AI use in a nonmisleading manner. Prohibition of dark patterns. User interface designs that deceive, coerce, or distort user decision-making are prohibited, including hiding critical information, creating false urgency, or making service cancellation unreasonably difficult. Business user fairness. Platforms must meet minimum standards for the treatment of sellers, workers, and content creators, including advance notice of term changes, explanation of account suspensions or visibility reductions,
August 20, 2026
Thailand has established a new cross-ministerial committee to oversee data center operations nationwide. On August 5, 2026, the Thai cabinet approved the Prime Minister’s Office Regulation on the Data Center Business Policy Committee, which was published in the Government Gazette on August 13, 2026, and is now in effect. The regulation reflects the government’s policy to elevate Thailand’s digital economy and promote investment in digital infrastructure and AI. The key features of the new committee are outlined below. Definition of “Data Center” Under the regulation, “data center” is defined as a building, premises, or structure that uses electronic equipment to provide services related to the collection, storage, processing, hosting, or transmission of data by electronic means to third parties that are not affiliates, as further determined by the Data Center Business Policy Committee. Committee Composition The committee will be chaired by a deputy prime minister designated by the prime minister, and will have three vice-chairs comprising the ministers of digital economy and society, interior, and energy. The committee also includes 12 ex-officio members: the permanent secretaries of finance, agriculture, natural resources, energy, interior, digital economy, industry, and commerce; the secretaries-general of the Board of Investment (BOI), Energy Regulatory Commission, National Broadcasting and Telecommunications Commission (NBTC), and National Water Resources Office; and the director of the Energy Policy and Planning Office. Up to three expert members may be appointed by the prime minister for two-year terms, renewable once. The secretary-general of the National Economic and Social Development Council (NESDC) serves as member and secretary, with up to two NESDC officials serving as assistant secretaries. Powers and Duties The committee is empowered to: Propose policies, standards, and operational frameworks for government agencies in approving, licensing, issuing investment promotion certificates, or providing services to data center operators in Thailand; Study, analyze, and