Thailand Electronic Transactions Law: What the 2026 Draft ETA Means for Business

Thailand’s electronic transactions law is heading for its biggest rewrite in more than two decades. In May 2026, the Electronic Transactions Development Agency (ETDA) released a fully redrafted Electronic Transactions Act (ETA) for public hearing, and the proposed text reshapes how companies sign, contract, and authenticate online. For foreign investors and international businesses operating in Thailand, these changes matter directly: they affect contract validity, e-signatures, automated systems, and the compliance duties of digital service providers.

What Is Changing in Thailand’s Electronic Transactions Law?

The current ETA dates back to 2001 and has been amended only piecemeal since. The new draft, by contrast, is a comprehensive overhaul rather than a patch. ETDA opened the consultation from 12 May 2026 to 15 June 2026, and the proposal will then move to parliament for further review and approval. Enactment could take roughly a year, so businesses have a clear window to prepare.

Several themes run through the reform. First, the draft unifies the rules for public and private transactions. Second, it strengthens the legal status of e-signatures and electronic evidence. Third, it recognizes contracts formed by automated systems and AI. Finally, it replaces mandatory licensing with a voluntary certification model backed by civil liability. Below, we break down each change and its practical impact.

Key Takeaway: The 2026 draft ETA is a full redraft, not a minor amendment. It modernizes Thailand’s electronic transactions law around e-signatures, automated contracting, and digital service standards. Although enactment may take about a year, companies should begin reviewing their digital workflows now.

Unified Rules for Public and Private Sectors

Currently, government transactions sit in a separate chapter with their own distinct rules. The draft ETA removes that division. Instead, it defines a “transaction” broadly to cover civil and commercial juristic acts, administrative procedures, administrative contracts, and other acts of government agencies.

This unified approach simplifies compliance for companies that deal with both private counterparties and Thai regulators. In practice, a business filing electronically with a government agency would follow the same core electronic-transaction principles it already applies to private contracts. As a result, internal legal teams can design one consistent digital execution policy instead of two parallel frameworks.

Stronger Recognition of Electronic Signatures

The draft broadens the definition of “electronic signature” to expressly include biometric data, such as fingerprints and facial recognition. Moreover, it refocuses the concept on two essentials: identifying the signatory and showing that the signatory intended to be bound by the content of the electronic data.

For businesses, this gives clearer statutory backing to biometric and app-based signing tools. However, there is an important caveat. Any biometric authentication still must comply with Thailand’s Personal Data Protection Act (PDPA), because fingerprints and facial scans are sensitive personal data. Companies should therefore pair e-signature adoption with proper consent, security, and data-handling controls.

Key Takeaway: Under the revised electronic transactions law, biometric e-signatures gain explicit legal recognition. Yet biometric data remains sensitive personal data, so PDPA compliance must run alongside any e-signature rollout.

A New Burden of Proof for Trusted Electronic Methods

The draft also rebalances how courts treat electronic evidence. When a party challenges the reliability of electronic data created using a “trusted electronic method” or a method prescribed by ETDA, the burden of proof shifts to the challenger. In other words, the party disputing the record must prove it is unreliable, and bear the cost of doing so.

This shift rewards companies that adopt ETDA-aligned systems. By using trusted timestamping, identity verification, and secure storage, a business strengthens the evidentiary weight of its records. Consequently, digital contracts and online agreements become easier to enforce. For context on how Thai courts already assess digital records, see our guide on whether you can sue over a loan made by chat in Thailand.

New Digital Tools the Draft ETA Introduces

The draft formally recognizes several digital methods that the current law does not address. These tools give businesses more legally certain ways to transact online. They include:

  • Electronic timestamping (e-timestamp) to prove when data existed.
  • Electronic registered delivery for verifiable notice and service of documents.
  • Electronic company seals for corporate execution.
  • Electronic stamp duty compliance to settle duties digitally.
  • Electronic identity authentication and verification for onboarding and signing.
  • Electronic transferable records, including electronic bills of lading and promissory notes.

The recognition of electronic transferable records is especially significant for trade and logistics. Electronic bills of lading, for example, can speed up cross-border shipping and reduce paperwork. This change also aligns Thailand more closely with international standards such as the UNCITRAL Model Law on Electronic Transferable Records.

Automated Systems, AI, and Electronic Contracts

One of the most forward-looking parts of the draft addresses automated contracting. The draft ETA expressly confirms that contracts formed through automated systems are valid and enforceable. This includes contracts concluded entirely between automated systems, or between an automated system and a person. A party may not deny a contract simply because no human reviewed it.

At the same time, the draft adds safeguards. If an automated system acts in a way that could not reasonably have been anticipated, the action may not bind the user, provided the counterparty knew or should have known it was unintended. The draft also protects individuals who make input errors when no correction tool is offered, allowing them to withdraw the erroneous message under certain conditions.

These provisions carry real weight for businesses deploying AI, especially agentic AI that acts on a company’s behalf. Therefore, organizations should review the legal limits, audit trails, and human-oversight controls built into their automated tools. Companies in regulated digital sectors may also want to revisit our analysis of the Thailand Digital Platform Competition Law 2026.

Key Takeaway: The draft electronic transactions law validates AI-driven and machine-to-machine contracts, while protecting parties from unforeseeable automated actions and uncorrected input errors. Businesses using automation should document oversight and error-handling now.

From Licensing to Voluntary Certification

The draft replaces the current mandatory licensing regime for electronic transaction businesses with a voluntary certification framework. It identifies seven categories of regulated services: identity verification; electronic signature services; timestamping; electronic data transmission and storage; website or domain name registration and certification; electronic transferable record systems; and other services set by ministerial regulation.

Providers in these categories must still meet detailed operational duties. These include maintaining reliable systems and personnel, running risk-management frameworks, offering electronic complaint channels, and enforcing cybersecurity measures with clear incident-response protocols. Providers that clearly disclose the purpose and limits of their services gain protection where users act beyond those boundaries.

Importantly, the draft also shifts enforcement from criminal to civil liability. Today, operating without a required license can mean up to three years’ imprisonment and fines up to THB 300,000. The draft removes those criminal penalties. Instead, providers that fail their duties may be liable in damages to affected users. For digital-asset operators, this pairs with the tightening trend we cover in Thailand’s advertiser identity verification rules.

What Foreign Investors and Businesses Should Do Now

The draft is not yet law, but preparation pays off. Companies that move early will reduce friction and litigation risk later. We recommend the following practical steps:

  • Map your workflows. Identify which filings, notices, and contracts can move to fully electronic processes.
  • Align with ETDA standards. Adopt trusted methods so your records benefit from the favorable burden of proof.
  • Combine e-signatures with PDPA controls. Where you use biometrics, secure consent and data protection first.
  • Audit automated systems. Build oversight, audit logs, and error-correction features into AI and machine contracting.
  • Review service-provider duties. If you fall in a regulated category, prepare for certification standards and civil liability.

Above all, treat the consultation period as a planning runway. A measured digital-transformation strategy now will position your business to benefit from greater legal certainty once the new electronic transactions law takes effect.

Frequently Asked Questions

When will Thailand’s new electronic transactions law take effect?
The draft ETA went through public consultation from 12 May to 15 June 2026. It must then pass parliamentary review and approval before enactment, a process that may take up to a year. Until then, the existing ETA remains in force.
Are electronic signatures legally valid in Thailand?
Yes. Electronic signatures are already recognized under the current ETA, and the draft strengthens this further by expressly including biometric signatures and focusing on signatory identity and intent. Businesses should still pair biometric tools with PDPA compliance.
Will contracts made by AI or automated systems be enforceable?
Under the draft electronic transactions law, contracts formed by automated systems, including AI-to-AI and AI-to-person transactions, would be valid and enforceable. The draft adds safeguards for unforeseeable automated actions and for input errors where no correction tool is provided.
Do electronic transaction service providers still need a license?
The draft replaces mandatory licensing with a voluntary certification framework across seven service categories. Providers must still meet operational and cybersecurity duties, and failures could trigger civil liability for damages rather than criminal penalties.
How should foreign businesses prepare for the reform?
Map which processes can go fully electronic, align systems with ETDA-prescribed standards, combine e-signatures with PDPA safeguards, audit automated and AI tools, and review whether your services fall within a regulated category requiring certification.

Navigating Thailand’s New Electronic Transactions Law?

Lex Bangkok advises international companies, investors, and digital businesses on contracts, e-signatures, data protection, and regulatory compliance in Thailand. Our team can help you prepare a compliant, future-ready digital strategy before the new ETA takes effect.

Schedule a Consultation

Authoritative references: Electronic Transactions Development Agency (ETDA) and the UNCITRAL Model Law on Electronic Transferable Records.