Thailand
Thailand has no AI law in force but is drafting one. A draft AI business law and royal-decree instruments have been in development through the Electronic Transactions Development Agency and the digital economy ministry, while the Personal Data Protection Act already binds AI systems that process personal data, including notification duties around automated processing.
Key points
- Draft AI legislation remains under development; no binding AI-specific statute is in force.
- The PDPA applies now, including to automated processing and profiling by AI systems.
- Thailand has favored an innovation-first posture while the draft matures, with sandboxes and sector pilots.
Laws and instruments
Personal Data Protection Act (applied to AI)
Thailand's data protection statute, fully effective since 2022, is the binding layer for AI systems processing personal data, with duties around lawful basis, notification, and automated processing.
Draft AI law (royal decree instruments)
AI-specific legislation under development through the digital economy ministry and ETDA. Text and timing remain unsettled; businesses should anchor on the PDPA meanwhile.
Timeline
- June 1, 2022PDPA fully effective.
- 2022 to 2026Draft royal decrees and an AI business law developed through ETDA and the ministry.
Who it applies to
AI systems processing personal data of people in Thailand fall under the PDPA today. AI-specific duties will arrive only when the draft law is enacted.
Penalties
PDPA penalties apply now, including administrative fines. No AI-specific penalty regime yet.
Common questions
Does Thailand have a comprehensive AI law?
What are the penalties for AI violations in Thailand?
Who does AI regulation in Thailand apply to?
Artificial Intelligence Regulations, "AI Regulation in Thailand," reviewed July 16, 2026, https://artificialintelligenceregulations.com/jurisdictions/thailand.html.
Entries state the position as of the review date and link to the primary text for verification.