Thailand wants tighter oversight of a market that is growing at an unusual speed. A data centre is a facility that stores, processes, and moves digital information for apps, cloud services, banks, businesses, and online systems. Think of it as the back room of the internet, where the data behind daily digital life sits and keeps moving.
According to The Nation’s report on the proposed rules, Thailand’s data centre market is projected to rise from 470 billion baht in 2025 to more than 2.02 trillion baht by 2031, with average annual growth of 27.71%. That creates a clear tension, strong investment and digital economy growth on one side, and security, crime prevention, and resource planning on the other.
Thailand’s data centre boom is creating huge economic promise
Thailand is moving into the spotlight as a regional data centre hub. The numbers behind that shift are large enough to explain why regulators want to act early, before the sector becomes even bigger and harder to supervise.
The source says seven data centre projects have already won Board of Investment approval, worth more than 96 billion baht. It also says 36 investment promotion applications tied to data centres and cloud services were filed in 2025, with a combined value of 728 billion baht. Named investors include True Internet Data Centre, a Gulf, Singtel, and AIS joint venture, as well as operators from Singapore, Japan, and Europe.
Here is the scale at a glance:
| Item | Confirmed figure |
|---|---|
| Market value in 2025 | 470 billion baht |
| Projected market value in 2031 | More than 2.02 trillion baht |
| Average annual growth | 27.71% |
| BOI-approved projects | 7 |
| Value of approved projects | More than 96 billion baht |
| 2025 investment promotion applications | 36 |
| Value of 2025 applications | 728 billion baht |
The takeaway is simple. Thailand isn’t talking about a niche industry. It is talking about infrastructure that could shape its wider digital economy.
What is driving demand for more data centres in Thailand?
Demand is rising because more services now run in the cloud. Businesses store data online, stream software to staff, and process more transactions in real time. At the same time, AI workloads need large computing capacity, fast networks, and secure facilities.
Thailand also benefits from geography. It sits in a strong regional position to serve Southeast Asia, while local demand continues to rise as companies digitize their operations. That is one reason Thailand’s push for data and AI readiness by 2026 matters beyond government policy. Better data systems, cloud adoption, and AI use all increase the need for high-capacity digital infrastructure.
Why investors still see Thailand as an attractive market
The source says tighter rules in places like Singapore, along with slower project movement in the United States, have helped keep investor attention on Thailand. That doesn’t mean Thailand is risk-free. Power supply, water use, permits, and future compliance all still matter.
Still, Thailand offers a mix that investors like, growing demand, regional reach, and visible government interest in digital infrastructure. Those strengths help explain why money is coming in now, even as oversight becomes a larger part of the conversation.
Why the NBTC sees new risks behind the fast growth
The NBTC’s concern is not based on a proven claim that Thai data centres are already serving as criminal bases. The source is clear on that point. There is no clear evidence of direct misuse at present.
However, regulators still see a risk worth addressing. Data centres handle vast volumes of data, connect to cross-border networks, and host many customers simultaneously. If checks are weak, that scale could make them useful to bad actors. In simple terms, grey capital means money or business activity linked to unclear, suspicious, or illegal networks.
Fast growth is the point. Regulators want tighter rules before the system becomes too large to monitor well.
How data centres could be misused by scammers or criminal networks
The source lists several risks being watched. Authorities worry that infrastructure could be leased to call centre gangs, used as a communication hub, or tied into digital businesses that help hide money flows.
These are risk scenarios, not proven cases. That distinction matters. A data centre can be a lawful facility serving banks, cloud platforms, and enterprise systems. Yet if customer checks are shallow, the same kind of infrastructure can also become attractive to groups looking for speed, scale, and anonymity.
Why security agencies and the financial sector are paying attention
This issue reaches far beyond telecom regulation. Cybercrime and cross-border fraud can damage banks, payment systems, investors, and public trust in online services. If suspicious funds move through data-heavy businesses, the concern is not only technical. It becomes financial and national security-related as well.
That wider concern helps explain why enforcement agencies stay alert. For example, recent NBTC enforcement against scam-supporting infrastructure in Mae Sot showed how communications systems can become part of cross-border fraud networks. That case did not prove misuse of licensed data centres, but it did show why regulators do not want weak points in the digital chain.
What stricter data centre licences could actually change
The core proposal is straightforward. The NBTC is considering moving data centre licensing into Type 3, the same category used for telecom network operators. At the moment, data centres fall under a lighter Type 1 framework.
This is still a proposal, not a final rule. The source says draft regulations will go to public consultation before any final announcement. Separate coverage from Developing Telecoms on the proposed reclassification describes the same move toward tighter oversight.
What a Type 3 licence means in simple terms
A Type 3 licence means a higher-oversight category. In plain English, that means more rules, more monitoring, and more accountability for operators who run infrastructure at scale.
For the market, the practical change is that a data centre would no longer be treated as a light-service business. It would sit closer to the kind of telecom operation that requires stronger supervision.
The new checks regulators want to add
The source points to three main areas. First, regulators want stronger infrastructure standards. Second, they want inspections of facilities and operations. Third, they want deeper access to customer information, including identity, credibility, and possible links to illegal activity.
That last part may prove the most sensitive. Customer due diligence sounds dry, but it goes to the heart of the policy debate. How much should operators know about who rents space, computing power, or network capacity? Regulators want better answers before problems emerge, not after.
Why zoning, electricity, and water use are part of the debate
The policy push is not only about crime prevention. Data centres consume large amounts of electricity, and many also require substantial amounts of water for cooling. So the NBTC is also looking at zoning and resource use.
That matters because digital growth can strain physical systems. A country can’t build a strong cloud economy if power grids, water supply, and land-use planning fall behind. Put simply, data centres may look invisible from a phone screen, but on the ground they are large industrial facilities.
Can Thailand protect national security without scaring off investors?
The government says the answer should be yes. The source says the new rules are not meant to block investment. Instead, the goal is to organize growth so that digital infrastructure does not become a weak point for fraud, suspicious capital, or poor resource planning.
That balance matters for Thailand’s broader digital push. A country that wants to be a regional tech base needs both investment and trust. The wider backdrop is clear in Thailand as Southeast Asia’s rising digital powerhouse, where digital adoption, 5G, cloud services, and smart infrastructure all feed long-term demand.
Why stronger oversight could help serious operators
Clearer rules can help credible investors. They reduce uncertainty, raise operating standards, and make it easier to separate serious operators from risky ones. Over time, that can make the market more trusted by banks, enterprise customers, and public agencies.
There is also a timing benefit. If regulators wait until the sector is much larger, changes could be more disruptive. Acting now gives operators time to adapt while the market is still forming.
What readers should watch next as the draft rules move forward
The next stage is the public consultation process and the final shape of the licence terms. The most watched details will be how customer due diligence works, how inspections are carried out, and how tightly zoning, power, and water rules are written.
The market will also watch whether the rules stay targeted. If they focus on real risks without creating broad-based friction, Thailand may strengthen both security and investor confidence simultaneously.
Thailand’s data centre sector is expanding fast enough to reshape part of the country’s digital economy. That growth brings clear upside, but it also carries risks regulators cannot ignore.
The central issue is balance. Thailand is not trying to shut the door on investment. It is trying to ensure the systems behind cloud services, AI, and online business don’t become weak points for cybercrime, fraud, or poor resource planning.
The final rules will help decide how confidently investors, operators, and policymakers view Thailand’s digital future.
