AI Regulation Hub

Thailand

Thailand has no horizontal AI Act. AI governance rests on the National AI Strategy 2022–2027, official AI Governance Guidelines, an ETDA generative AI guideline for organisations, and the Personal Data Protection Act.

Key provisions

National AI Strategy and Action Plan 2022–2027

In force

Cabinet-approved 2022. Focuses on government readiness, AI infrastructure, ethical standards, awareness, education, research, innovation and adoption.

AI Governance Guidelines

In force

Addresses AI governance structures, roles and responsibilities, AI strategy, AI operations, risk controls and responsible AI management.

Generative AI Governance Guideline for Organisations

In force

Issued by ETDA for executives and responsible teams using generative AI. Explains capabilities, limitations, risks and governance measures.

PDPA overlay

In force

AI systems involving personal data must comply with Thailand's Personal Data Protection Act. Especially relevant for profiling, automated recommendations, customer analytics, recruitment, fraud detection, biometric, healthcare, financial services and generative AI.

Detailed overview

Thailand does not currently have a single horizontal AI Act. AI governance is based on national AI strategy, official AI governance guidelines, personal-data protection, sectoral regulation and public-sector policy.

National AI Strategy and Action Plan 2022–2027

Thailand's National AI Strategy and Action Plan 2022–2027 was approved by the Cabinet in 2022. It focuses on government readiness, AI infrastructure, ethical standards, awareness, education, research, innovation and AI adoption.

AI Governance Guidelines

Thailand has also developed official AI Governance Guidelines. These guidelines address AI governance structures, roles and responsibilities, AI strategy, AI operations, risk controls and responsible AI management. They are designed to help organisations develop and use AI in a safer and more accountable way.

Generative AI guideline

For generative AI, Thailand's Electronic Transactions Development Agency has issued a Generative AI Governance Guideline for Organisations. The guideline is intended for executives and responsible teams using generative AI in organisations. It explains generative AI capabilities and limitations, risks and governance measures.

Personal Data Protection Act

AI systems involving personal data must comply with Thailand's Personal Data Protection Act. This is especially relevant for AI used in profiling, automated recommendations, customer analytics, recruitment, fraud detection, biometric systems, healthcare, financial services and generative AI.

Penalties

Thailand does not currently have one AI-specific penalty table. Penalties depend on the relevant legal framework, including personal-data protection, electronic transactions, cybersecurity, consumer protection, financial regulation, healthcare regulation, employment law or criminal law.

Ready to launch legally?

Book a 30-minute consultation. We'll map your licensing path and tell you exactly what's required, in plain language.