Thailand: Adopted Decree for overseeing business services related to Digital Identity Proofing and Authentication Systems requiring a license including operational license requirement

On 26 May 2023, the Electronic Transactions Development Agency (ETDA) of Thailand adopted the Decree for the supervision of business services related to digital identity proofing and authentication systems, which require a licence. The Decree delineates the categories of digital identity services that necessitate licensing, including identity proofing, authentication, and data exchange for identity verification. In particular, the decree defines the services in question and lists the key processes involved, namely the collection and verification of identity data, the confirmation of authenticity through the use of credentials, and the assurance of secure data transmission between parties. This directive, which is based on the Royal Decree on the Supervision of Businesses Providing Digital Identity Verification and Authentication Services that Require a License, B.E. 2565 (2022), obligates service providers in this sector to comply with specific supervision criteria. The criteria encompass risk management, information technology security, fraud prevention, service standards, and the protection of service users, and shall take effect on 22 June 2023.