Thailand
Thailand has no AI law in force but is close to a bill. The Electronic Transactions Development Agency put draft principles for a risk-based AI law to public hearing in June 2025, then released a full draft Artificial Intelligence Act on July 9, 2026 for a hearing that closed August 14, 2026. The draft sets four tiers, reaches offshore developers, providers, deployers, and platforms, and carries strict and joint liability with powers to suspend or block systems. The next step is Cabinet approval in principle, which had not been reported as of October 26, 2026. The Personal Data Protection Act already binds AI systems that process personal data.
Key points
- A draft Artificial Intelligence Act was released for public hearing on July 9, 2026, closing August 14; it awaits Cabinet approval in principle, and no binding AI-specific statute is in force.
- The PDPA applies now to AI systems that process personal data.
- The draft act sorts systems into prohibited AI, high-risk AI, AI needing a license, and AI subject to transparency rules (deepfakes, chatbots, and generative AI), with sector regulators rather than a single AI authority.
Laws and instruments
Personal Data Protection Act (applied to AI)
Thailand's data protection statute, fully effective since 2022, is the binding layer for AI systems processing personal data, with duties around lawful basis and notification.
Draft Artificial Intelligence Act
A full draft AI act released by ETDA on July 9, 2026 for public hearing until August 14, 2026, building on the June 2025 draft principles. It would create four tiers (prohibited AI, high-risk AI, AI subject to licensing, and AI subject to transparency duties such as deepfakes, chatbots, and generative AI), apply to developers, providers, deployers, and platform operators including offshore entities, impose strict and joint liability, require machine-readable labels on AI-generated content, and give authorities powers to suspend services, order recalls, and block AI systems. Sector regulators would set requirements for their industries. After the hearing the responsible ministry submits the draft to the Cabinet for approval in principle; law-firm analyses estimate six to twenty-four months to enactment.
Timeline
- June 1, 2022PDPA fully effective.
- 2022 to 2026Draft royal decrees and an AI business law developed through ETDA and the ministry.
- June 2025ETDA and the digital economy ministry hold a public hearing on draft principles for an AI law, open until June 24, 2025.
- July 9, 2026ETDA releases a full draft Artificial Intelligence Act for public hearing.
- August 14, 2026The public hearing on the draft AI Act closes; the draft moves toward Cabinet approval in principle.
Who it applies to
AI systems processing personal data of people in Thailand fall under the PDPA today. AI-specific duties will arrive only when the draft law is enacted.
Penalties
PDPA penalties apply now, including administrative fines. The draft AI Act would add strict and joint liability and powers to suspend services, order recalls, and block AI systems; none of it is in force.
Common questions
Does Thailand have a comprehensive AI law?
What are the penalties for AI violations in Thailand?
Who does AI regulation in Thailand apply to?
Artificial Intelligence Regulations, "AI Regulation in Thailand," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/thailand.html.
Entries state the position as of the review date and link to the primary text for verification.