Thailand Business Regulation
Regulatory & Compliance
Operating in Thailand means navigating a layered regulatory environment — sector-specific licences, foreign ownership restrictions, ongoing compliance obligations, and regulators with real enforcement powers. Getting this right from the start is far cheaper than fixing it later.
Talk to a Regulatory LawyerRegulatory Risk Is Commercial Risk
A licence refused, revoked, or conditions breached can halt operations entirely. A sector that requires regulatory approval before trading — healthcare, financial services, food and beverage, real estate, hospitality — puts regulatory status at the centre of every operational and commercial decision.
Thailand's regulatory environment is also a foreign investment environment. The Foreign Business Act (FBA), BOI restrictions and incentives, sector-specific foreign ownership caps, and the interaction between these frameworks create complexity that requires practical legal navigation rather than a generic compliance checklist.
We advise businesses on what approvals they need, how to obtain and maintain them, how to manage ongoing obligations, and how to deal with regulators when things go wrong.
REGULATORS WE REGULARLY WORK WITH
- Department of Business Development (DBD)
- Board of Investment (BOI)
- Food and Drug Administration (FDA/TFDA)
- Bank of Thailand (BoT)
- Securities and Exchange Commission (SEC)
- Department of Special Investigation (DSI)
- Revenue Department
- Department of Land
- Ministry of Public Health
- Department of Industrial Works (DIW)
What We Do
From obtaining the initial licence to managing ongoing obligations and dealing with enforcement actions — practical, sector-aware regulatory advice across the full lifecycle.
Regulatory Approvals & Licensing
Identifying what licences and approvals your business needs before operations begin — and obtaining them. This includes foreign business licences under the FBA, sector-specific operating licences (healthcare, food & beverage, hospitality, financial services), BOI promotion applications, and import/export permits. We advise on structure to minimise approval complexity and manage the application process with the relevant agencies.
Sector-Specific Regulatory Advice
Each regulated sector in Thailand has its own framework of rules, enforcement body, and compliance culture. We advise across healthcare and medical services (MOPH licensing, hospital/clinic approvals), food and beverage (FDA registration, GMP/HACCP compliance), hospitality (hotel licences, liquor licences, entertainment), financial services and fintech (BoT and SEC requirements), real estate (EIA, land development approvals), and manufacturing (DIW operating permits, environmental requirements).
Ongoing Compliance Programmes
Regulatory compliance is not a one-off task. Licences need renewing, conditions need monitoring, reporting obligations recur, and regulatory requirements change. We provide ongoing compliance support — tracking renewal deadlines, monitoring regulatory developments, reviewing operational changes against licence conditions, and flagging issues before they become violations.
Regulatory Risk Assessments
Before a business launches, expands into a new sector, or restructures its operations, understanding the regulatory risk profile is essential. We conduct regulatory risk assessments — mapping the applicable regulatory framework, identifying gaps between current operations and compliance requirements, and providing a prioritised remediation roadmap. These are particularly valuable in M&A due diligence where the target operates in a regulated sector.
Government & Regulator Engagement
Dealing with Thai government agencies and regulators requires understanding how they operate, what they prioritise, and how to present a case effectively in their context. We support clients in their interactions with regulators — preparing submissions, responding to enquiries, seeking interpretations or exemptions, and managing agency relationships on an ongoing basis. Good regulator relationships are a material business asset.
Regulatory Investigations & Enforcement
When a regulator investigates, the way you respond matters enormously. We advise businesses facing regulatory inquiries, investigations, or enforcement action — managing the response, limiting exposure, negotiating with the enforcement authority, and representing the business in any formal proceedings. Speed and the right approach in the first days of an investigation can determine the outcome.
Compliance Reviews & Remediation
Many businesses operating in Thailand are carrying compliance gaps they are not aware of — accumulated as the business grew, the regulatory environment changed, or the initial setup was not done carefully. We conduct compliance reviews across corporate, employment, regulatory, data protection (PDPA), AML/KYC, and sector-specific requirements, and manage the remediation process to bring the business into good standing.
Cross-Border & Foreign Investment Regulatory
Foreign businesses face an additional regulatory layer in Thailand — the Foreign Business Act, foreign ownership restrictions in specific sectors, treaty-based exceptions (TIFA, JTEPA, AFAS), and the interaction between FBA permissions and BOI promotion. We advise on structuring foreign investment to comply with these requirements, obtaining the necessary approvals, and maintaining ongoing compliance as the business grows.
PDPA & Data Protection Compliance
Thailand's Personal Data Protection Act (PDPA) came into full effect in 2022 and applies to any business that collects, uses, or discloses personal data of individuals in Thailand — including foreign businesses with no local establishment. PDPA compliance requires privacy policies, consent mechanisms, data subject rights procedures, data breach response protocols, and appropriate security measures.
Enforcement is real — the Personal Data Protection Committee (PDPC) has active enforcement authority with civil and criminal penalties. We advise on PDPA compliance programmes, data processing agreements, cross-border data transfer requirements, and breach response.
AML & KYC Obligations
Thailand's Anti-Money Laundering Act applies broadly to financial institutions, real estate agents, dealers in precious metals and stones, and a widening list of designated non-financial businesses. KYC, transaction monitoring, record-keeping, and suspicious transaction reporting obligations apply to many businesses that do not identify themselves as being in the AML framework.
We advise on whether AML obligations apply to your business, what they require in practice, and how to build a proportionate compliance programme that satisfies the regulator without creating unnecessary operational burden.
Get in Touch
Whether you are setting up in Thailand, expanding into a regulated sector, or dealing with a regulatory issue — talk to us before it becomes a problem.