You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 22, 2012

Using the Computer Crimes Act to Combat Online Piracy

Informed Counsel

The increase in online shopping has proven lucrative for legitimate retailers. But traders selling counterfeit and pirated products have also taken advantage by selling a wide range of counterfeit products online. In searching for new solutions to battle intellectual property infringement on the internet, recent meetings between government officials and members of the private sector have resulted in an innovative approach that relies on existing legislation. This article will provide an overview of the current regulatory environment and the recommended procedures that will facilitate the shutting down of illegal retail websites, and help to halt the rise in purchases of counterfeit goods on the internet.

Online Piracy Challenges

According to a report by the Department of Intellectual Property (DIP), 40 percent of pirated films, music DVDs, and CDs are offered for sale online. For counterfeiters, there are three key benefits in shifting from traditional brick-and-mortar marketplaces to online retailing:

  1. There is no stall rental fee.
  2. Many of the corrupt activities surrounding the sale of counterfeit goods can be avoided.
  3. Storage of goods is not required, which reduces the chances of being caught in possession of the illegal goods and subsequently arrested.

Since existing IP laws in Thailand do not explicitly sanction the sale of counterfeit goods online, IP owners have, up until now, been unable to take aggressive action against these online sellers. In practice, IP owners have tried to tackle this type of infringement in Thailand by conducting investigations to uncover the source of the fake goods, followed by raid actions at storage facilities, stockrooms, and warehouses.

This investigation-and-raid approach however, is increasingly becoming hampered by the fact that online traders do not typically store their goods on their premises. Instead, traders purchase the counterfeit products from other sellers in the market, after having received purchase orders from their customers.

Existing Legal Framework

In the absence of specific legislation to address these activities, the Thai government has tried to solve this problem by relying on related legislation. When advising IP owners of their enforcement options, one suggestion raised by the DIP is to apply Sections 14 and 20 of the Computer Crimes Act B.E. 2550 (2007).              

Section 14: Whoever commits the following offenses shall be liable to imprisonment for a term not exceeding five years, or a fine of not exceeding THB 100,000, or both:

(1) Entering wholly or partially spurious computer data or false computer data into a computer system, in a manner that is likely to cause injury to other persons or the public. …

Section 20: In the case where the commission of an offense under this Act involves the distribution of computer data that may affect the security of the Kingdom, as prescribed in Book II, Title I or Title I/I of the Penal Code, which may be inconsistent with public order or good morals, the competent official may apply for a motion to the court to order that the distribution of such computer data be blocked.

In 2011, these sections were applied to a case related to food and medical products before Thailand’s Criminal Court. In Red Case Sor. 33/2554, the defendant committed an offense of advertising the sale of food, medicine, and medical equipment by using untrue information that was deceptive to consumers. The court deemed that this act constituted an offense under Section 14(1) of the Computer Crimes Act. The court therefore issued an order to block the distribution activities undertaken by the website, pursuant to Section 20 of the Act.

As this judgment shows, Sections 14 and 20 grant to the court the authority to block the distribution of forged computer data or false computer data, upon the request of an officer, if the court finds that such contents may be inconsistent with public order or good morals. Unfortunately, the content of the Computer Crimes Act is not clear in defining whether offering counterfeit goods for sale on a website can be considered “forged computer data.” Although some government officials claim that this law sets out the right to take action against websites that offer fake goods for sale online, others opine that fake goods offered on a website cannot be deemed “forged computer data” under Section 14.

Proposed New Approach

In seeking a solution to this problem, representatives from the Ministry of Information and Communication Technology (MICT), the DIP, and the private sector met on March 12 and March 20, 2012. During the meeting, the Director-General of the DIP stated that she encouraged IP representatives or IP owners to submit a formal letter to the MICT requesting to shut down these websites under Section 14. When an IP owner proceeds with such a formal letter, this would provide a type of test case to determine whether Section 14 of the Computer Crimes Act can feasibly be used to shut down websites that offer fake goods for sale.

In light of these developments, a new procedure was proposed during the meeting (see graphic below). If all parties implement this procedure, it could enable IP owners to shut down websites selling counterfeit or pirated goods in as little as two weeks. Clearly, this would be a major development for long-suffering IP owners who have battled online piracy for years.

Implementing the Procedure

Although the debate is ongoing, it is evident that the Thai government intends to implement more stringent measures in the near future to inhibit the stream of illicit gains enjoyed by illegal online retailing operations. When an IP owner decides to test the approach proposed by the DIP and a court order is requested, practitioners will eagerly await the outcome for any developments in this area of the law. If the Computer Crimes Act is deemed practicable, it would provide an efficient route for IP owners to shut these websites down, without incurring additional investigation costs.

However, if the court decides that the activities of illegal online retailers—specifically, offering counterfeit goods for sale on a website—do not constitute “forged computer data” under Section 14, it will then be necessary for all stakeholders to push ahead with further amendments to existing IP law.

RELATED INSIGHTS​ 

December 26, 2025
The Bank of Thailand (BOT) has released the Guidelines for Digital Fraud Management, which took effect on December 17, 2025, incorporating certain amendments to the draft guidelines issued in March 2025. These official guidelines aim for end-to-end digital fraud prevention, with a particular focus on mule accounts, to enhance trust and security in Thailand’s financial system. The guidelines apply to “financial service providers,” including: Financial institutions and special financial institutions under the Financial Institution Business Act; and Operators of Inter-institutional Fund Transfer System e-money services and e-fund transfer services under the Payment Systems Act. Besides commercial banks and e-money operators that offer fund-transfer services, other providers may adopt requirements based on risk proportionality and baseline standards set out in the guidelines (for instance, an e-money operator that does not offer e-fund transfer services could consider implementing a fraud monitoring and detection system according to the risk level of its service). The guidelines establish the following key requirements: Policy and oversight. Directors and senior executives of financial service providers must adopt appropriate “end-to-end” fraud management policies and KPIs to manage digital fraud, covering prevention, monitoring, detection, management, resolution, and support for affected customers. The fraud management policy must be regularly reviewed, and whenever there is a situation or change that significantly affects the efficiency of the fraud management. Any significant update to the policy must first be approved by the board of the financial service provider. The BOT also encourages providers to collaborate in establishing industry standards aligned with applicable laws and regulations to ensure consistency and best practices across the sector. Fraud management processes. Financial service providers must establish a clear framework for managing digital fraud throughout the customer lifecycle—from customer onboarding to service termination—covering at least the following processes: Know your customer (KYC) and customer due diligence (CDD):
December 15, 2025
Thailand is taking steps to energize its startup scene by drafting the Startup Promotion Law. This draft law aims to remove obstacles, open new funding opportunities, and provide coordinated government support. The goal is to make it easier for Thailand-based startups to grow and compete on a global stage. Why Is This Law Needed? For many years, Thai startups have operated under traditional company law frameworks that were not designed with high-growth businesses or with fundraising opportunities in mind. Restrictions on issuing bonds, offering shares to outside investors, and repurchasing shares for employee incentive programs made it challenging for emerging companies to access capital and accelerate their growth. The draft Startup Promotion Act seeks to remove these obstacles and foster a more competitive, entrepreneur-friendly environment in Thailand. Who’s in Charge? Two main organizations will oversee the startup ecosystem: Startup Promotion Committee: This group, to be appointed by the National Science, Research, and Innovation Policy Council, will set national strategies, policies, and budget; design promotional campaign and incentives; and propose further legislative amendments to promote startups. National Innovation Agency (NIA): Under the draft act, the NIA will be the main contact for startups and will serve as the secretariat office of the Startup Promotion Committee, coordinating data, advising startups, maintaining the public registry, and providing funding and investment (grants, repayable grants, loans, and equity) under committee criteria and, where applicable, cabinet approval. What Startups Are Eligible for Benefits? To be officially recognized and access benefits, a company must: Be a private limited company less than 10 years old at the time of application. Existing companies that already exceed the 10-year threshold may still apply for startup statues within one year of the law’s enactment, as long as they otherwise still qualify for the new regime. Have average annual revenue not
December 12, 2025
Tilleke & Gibbins has updated the Cambodia, Myanmar, Thailand, and Vietnam chapters in Multilaw’s Global Data Protection Guide, which collects expert advice from Multilaw member firms in 90 jurisdictions around the world (including a Laos chapter, which is also authored by Tilleke & Gibbins). The guide provides answers to key issues concerning the fast-developing data protection and privacy laws around the world, and helps data protection officers and in-house counsel understand how the regulatory regime for data protection can affect their organizations in various jurisdictions. Each section of the guide identifies the main laws that govern data protection in that jurisdiction, and gives a detailed overview of the legal principles in place as well as the enforcement authorities responsible for overseeing compliance. The guide also covers issues related to data subject rights, data protection officers, impact assessments, data breach notification requirements, and cross border data transfers. The use of personal data in marketing is also considered, with specific information on electronic marketing rules, cookies, and marketing to businesses and consumers. Multilaw, of which Tilleke & Gibbins is a longtime member, is a global network of carefully selected independent law firms able to provide expert legal advice in complex environments around the globe. The full guide is available for free on the Multilaw website.
December 11, 2025
On December 10, 2025, the National Assembly of Vietnam passed a new Cybersecurity Law, which will take effect on July 1, 2026. The new Cybersecurity Law was developed based on the consolidation of the 2018 Cybersecurity Law and the 2015 Law on Network Information Security. While the final approved version of the new Cybersecurity Law has not yet been published, according to official reports, the following notable requirements are confirmed to be included: The new Cybersecurity Law dedicates a specific article to prohibited acts related to cybersecurity, under which it strictly prohibits posting or disseminating information online that propagandizes against the Socialist Republic of Vietnam. The law also prohibits, among other things, (i) the appropriation, trading, seizure, or intentional disclosure of information classified as state secrets, work secrets, business secrets, personal secrets, family secrets, and private life; (ii) intentionally eavesdropping, recording, or filming online conversations without authorization; and (iii) the use of artificial intelligence (AI) or new technologies to conduct prohibited acts. The Ministry of Public Security (MPS) has the authority to require enterprises providing telecommunications, internet, and online services, as well as system administrators, to remove information violating cybersecurity laws from systems under their management. The MPS is also assigned responsibility for ensuring information security in cyberspace and data security, establishing mechanisms for IP address identity management, verifying digital account registration information, and issuing warnings and sharing information on cybersecurity threats. Information systems are classified into five levels (similar to the 2015 Law on Network Information Security) based on the degree of harm to national security and social order if an incident occurs. The MPS is the lead agency assisting the government in state management of cybersecurity. The Ministry of National Defense is responsible for managing military information systems, and the Government Cipher Committee manages cryptographic and cipher