Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 05 JUNE 2026

Thailand’s Insurance Regulator Proposes Amendments To IT Risk Management Regulations

Tilleke & Gibbins
Tilleke & Gibbins
Contributor
Tilleke & Gibbins

Tilleke & Gibbins

Tilleke & Gibbins has been present in Vietnam since 1992, when it became the first foreign law firm...

View firm profile
Explore more from Tilleke & Gibbins

Thailand’s Office of Insurance Commission (OIC) has opened a public hearing on proposed amendments to the OIC Notification on Criteria for Information Technology Risk Governance...

ThailandInsurance
Athistha (Nop) Chitranukroh
Athistha (Nop) Chitranukroh
Thammapas Chanpanich
Thammapas Chanpanich
Varisara Chaiwattanachai
Varisara Chaiwattanachai
Author LinkedIn connections

Thailand’s Office of Insurance Commission (OIC) has opened a public hearing on proposed amendments to the OIC Notification on Criteria for Information Technology Risk Governance and Management for Life Insurance and Non-Life Insurance Companies B.E. 2563 (2020) via the centralized Law platform. The public consultation period runs from May 8, 2026, to June 9, 2026.

The proposed amendments aim to elevate the IT risk governance and cybersecurity risk management framework to be more modern and aligned with international standards, with a focus on strengthening cyber resilience, enhancing the role of IT audits, and establishing data governance and data quality controls.

The parties affected by these amendments include life insurance companies, non-life insurance companies, and external IT auditors.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Thailand Amends Rules On Insurance Policy Delivery, Sales, And Advertising

Thailand's Office of Insurance Commission has issued new regulations requiring insurers to deliver policies electronically by default, implement enhanced risk management controls, and establish stricter oversight of advertising and sales conduct. The amendments introduce significant data-reporting obligations and expanded compliance requirements for insurers, agents, brokers, and third-party advertisers operating in Thailand's insurance market.
ThailandInsurance
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Identifies Online Triggers Of Insurance Licensing Requirements

Thailand's insurance regulator has drawn a clear line between educational content and regulated activity on social media, establishing new compliance obligations for influencers and content creators who discuss insurance products online. The guidelines introduce strict disclosure requirements, preapproval workflows, and monitoring duties that will reshape how insurance companies engage digital creators.
ThailandInsurance
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Forced-Labor Import Ban: How Should Businesses Respond?

Vietnam has introduced a new prohibition on importing goods produced through forced labor under Decree No. 292/2026/ND-CP, effective September 5, 2026. While the Ministry of Home Affairs has yet to publish implementing guidance, businesses face immediate legal exposure and must establish internal controls, supply-chain safeguards, and remediation procedures to manage forced-labor risks across their operations and commercial relationships.
VietnamInternational Law
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Drug Registration Regulations To Reduce Administrative Burden

Vietnam's Ministry of Health has issued Circular No. 32/2026/TT-BYT, introducing significant reforms to the drug registration process that will take effect on October 1, 2026. The new regulations establish a five-year data exclusivity period for new drugs, simplify requirements for foreign legal documents, and introduce a re-examination pathway that could reduce administrative burdens for pharmaceutical companies.
VietnamFood, Drugs, Healthcare, Life Sciences
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Advances National Policy Framework For Data Centers

On September 4, 2026, Thailand’s prime minister convened the first meeting of the Data Center Business Policy Committee. The committee endorsed a draft policy framework for the data center industry and tasked four subcommittees with developing the standards that would sit beneath it, shifting away from fragmented, agency-by-agency approvals toward a unified national strategy aiming to maximize economic value while managing environmental and infrastructure concerns.
ThailandMedia, Telecoms, IT, Entertainment
Tilleke & Gibbins
Tilleke & Gibbins