Thai Online Platform Regulation: ETDA Notification & PDPA

TL;DR

The Royal Decree on Digital Platform Service Businesses B.E. 2566 (2023), administered by ETDA, requires platform operators serving Thai users to notify ETDA (large platforms) or comply with minimum-transparency rules (others). The PDPA, NBTC content-services framework, and the Computer Crime Act B.E. 2550 (2007) add further layers. Foreign-incorporated platforms with Thai-user reach fall within scope (extraterritorial effect).

Scope

• Marketplace (e-commerce).
• Online services (search, social, video).
• Cloud / hosting providers.
• Threshold tiers: large platform / general platform / specific-purpose.

Notification Categories

Operational Duties

• Designate Thailand representative.
• Publish terms + complaint mechanism.
• Annual report to ETDA.
• Cooperate with PDPC + ETDA enforcement.
• Take-down procedures.

Adjacent Regimes

• PDPA (data processing).
• Computer Crime Act §14, §20 (content removal orders).
• NBTC content-services licensing for OTT.
• Consumer Protection Act B.E. 2522 (1979) + OCPB for e-commerce.

Common Mistakes

• Assuming Thailand has no platform regulation — it does (and growing).
• No Thailand representative.
• Combining PDPA + ETDA duties as one — they're separate.

FAQs

1. SaaS platforms?

If serving Thai users with revenue-generating activity, in scope subject to thresholds.

The Digital Platform Decree

Digital platforms are regulated by the Royal Decree on the Operation of Digital Platform Services Businesses B.E. 2565 (2022), administered by the Electronic Transactions Development Agency (ETDA). It covers "digital platform services" that act as intermediaries connecting businesses, consumers or users online — marketplaces, ride-hailing, delivery, and similar. Operators must notify ETDA before or when they begin operating, and the obligations scale with size: very small operators below the prescribed revenue/user thresholds have lighter duties, while larger platforms face enhanced requirements on transparency of terms, ranking and fees, complaint handling, and reporting.

Foreign Platforms and Ongoing Duties

Crucially, foreign-based platforms that provide services to users in Thailand are in scope and must appoint a local coordinator/representative and notify ETDA. Ongoing obligations typically include publishing clear terms and conditions, giving businesses advance notice of material changes or suspension, operating a complaints channel, and keeping ETDA informed. The regime overlaps with the PDPA (for personal data), consumer-protection rules, and — for platforms facilitating sales — tax and e-payment requirements, so a platform should map all four when entering the Thai market. Non-notification or non-compliance can lead to administrative penalties.

2. Do social-media and content platforms count?

It depends on function: a platform is caught where it acts as an intermediary facilitating transactions or connections among users in a way that meets the decree's definition and thresholds, rather than simply publishing its own content.

Related Reading

• PDPA Fines
• Cyber & Digital Law Hub
• PDPA Hub