Thailand
AI Regulation

No AI-specific legislation has been enacted.

The Ministry of Digital Economy and Society (MDES) and the Electronic Transactions Development Agency (ETDA) released Draft Principles of the AI Law in 2025, consolidating earlier separate proposals into a single instrument following public consultation in June 2025. ETDA is revising the draft; it is expected to be submitted to the Cabinet and then move through Parliament, with enactment anticipated around 2026–2027.

The draft adopts a risk-based framework modelled on the EU AI Act, with prohibited-risk and high-risk categories defined by sectoral regulators through subordinate legislation

Prohibited-risk systems include subliminal manipulation, social scoring, and real-time biometric identification in public spaces

High-risk AI providers would face mandatory registration, conformity assessments, and duty-of-care obligations

Foreign AI service providers would be required to designate a local legal representative in Thailand

An AI Governance Centre under ETDA would coordinate implementation, manage a national AI registry, and oversee regulatory sandboxes

The National AI Strategy and Action Plan (2022–2027) guides broader AI development across five pillars including infrastructure, human capacity, and ethics

The Bank of Thailand issued its Policy Framework on AI System Risk Management in September 2025, the first sector-specific binding AI governance framework

The Personal Data Protection Act (PDPA, 2019) applies to AI systems processing personal data

Not a signatory to the Council of Europe Framework Convention on AI