1. Introduction

Civil Law and Autonomous Human-Centered Technology Governance in Thailand concerns the legal principles governing the development, deployment and operation of autonomous technologies while protecting human dignity, individual autonomy, privacy, equality, safety, accountability and access to justice.

Human-centred technology governance means that technological innovation must serve human interests rather than treating individuals merely as sources of data, commercial resources or objects of automated decision-making.

In Thailand, this subject is particularly important because of the growing use of:

Artificial intelligence and autonomous decision-making systems.

Automated healthcare and diagnostic technologies.

Facial recognition and biometric identification.

Autonomous vehicles and intelligent transportation.

Digital financial services and algorithmic lending.

Smart cities and automated public infrastructure.

Online platforms and automated content moderation.

Robotics and autonomous industrial systems.

Digital identity and personal-data processing.

AI-assisted judicial and administrative services.

Thailand does not yet have a comprehensive, dedicated AI civil-liability statute establishing a complete framework for autonomous systems. Instead, existing constitutional protections, the Civil and Commercial Code, the Personal Data Protection Act B.E. 2562 (2019), the Electronic Transactions Act B.E. 2544 (2001), consumer-protection legislation and product-liability principles provide the principal legal foundations.

Central legal principle: Autonomous technology should not eliminate human responsibility. Where an automated system causes legally recognised harm, the law must identify the responsible developer, manufacturer, operator, service provider or other legally accountable person.

2. Meaning of Human-Centered Technology Governance

Human-centred technology governance is a legal and institutional framework ensuring that technology respects the rights and legitimate interests of individuals.

It involves five fundamental dimensions.

A. Human dignity

Technology must respect the inherent dignity of individuals.

For example:

Facial-recognition systems should not arbitrarily identify or classify individuals.

AI recruitment systems should not unfairly exclude applicants.

Automated healthcare systems should respect patient autonomy.

Digital surveillance should not unnecessarily interfere with personal life.

In Thailand, constitutional privacy protection under Section 32 provides an important foundation.

B. Human autonomy

Individuals should retain meaningful control over decisions affecting their lives.

Examples include:

The ability to challenge automated financial decisions.

The right to understand significant uses of personal information.

Appropriate human involvement in critical medical decisions.

Protection against manipulative automated interfaces.

C. Human safety

Autonomous systems must be designed and operated to minimise foreseeable risks.

Manufacturers and operators may face civil liability where defective products, negligent operation or failures of reasonable precautions cause injury.

D. Human equality

Technology should not systematically discriminate against individuals because of personal characteristics or circumstances.

For instance, an algorithmic lending system should not unfairly reject applicants because of inaccurate or discriminatory data.

E. Human accountability

The existence of artificial intelligence does not automatically transfer legal responsibility from human or corporate actors to the machine.

An AI system is not ordinarily an independent legal person under Thai civil law.

3. Legal Framework Governing Human-Centred Technology in Thailand

A. Constitution of Thailand B.E. 2560 (2017)

The Constitution establishes fundamental protections relevant to technology governance.

These provisions provide constitutional standards against which state technology policies and relevant exercises of public authority can be assessed.

For example, government deployment of facial recognition or mass surveillance should be evaluated in light of privacy, proportionality and applicable statutory safeguards.

B. Civil and Commercial Code

The Thai Civil and Commercial Code (CCC) is central to private-law accountability.

Section 420 – General tort liability

Section 420 establishes liability where a person, wilfully or negligently and unlawfully, injures another person's life, body, health, liberty, property or another legally protected right.

Its application to autonomous technologies may include:

Negligent AI system deployment.

Inadequate safety testing.

Failure to maintain autonomous machinery.

Unlawful digital surveillance.

Negligent disclosure of personal information.

Harm caused by automated systems.

Section 423 – Defamation and reputational injury

This provision is relevant when automated systems publish or communicate false information damaging another person's reputation.

For example, an AI-generated report falsely identifying an individual as a criminal could create legal exposure depending on the circumstances and applicable statutory requirements.

Section 425 – Employer liability

An employer may be responsible for wrongful acts committed by an employee in the course of employment.

This is relevant where employees operate, supervise or misuse autonomous systems during their work.

Section 437 – Liability relating to dangerous things

This provision establishes special liability concerning damage caused by certain dangerous things under the statutory conditions.

It may be relevant to autonomous machinery, hazardous industrial equipment and other technologies falling within its scope.

C. Personal Data Protection Act B.E. 2562 (2019)

The PDPA is one of Thailand's most important legal instruments for human-centred technology governance.

Its major provisions include:

Section 19: Consent requirements and related conditions.

Section 23: Transparency and privacy information.

Section 24: Lawful bases for processing personal data.

Section 26: Special-category personal data.

Section 37: Data-controller responsibilities.

Section 40: Data-processor responsibilities.

Section 77: Civil liability.

Section 78: Punitive damages.

The Act is particularly relevant to autonomous systems processing biometric information, health information, financial records and behavioural data.

A company cannot avoid its data-protection responsibilities merely because personal information is processed automatically.

D. Electronic Transactions Act B.E. 2544 (2001)

The Electronic Transactions Act recognises the legal significance of electronic information and electronic transactions.

Its Sections 7–11 are particularly important.

They address:

Non-discrimination against electronic data.

Legal recognition of electronic transactions.

Electronic writing requirements.

Electronic signatures.

Admissibility and evidential reliability of electronic records.

These provisions support digital contracts, electronic authentication and disputes involving automated transactions.

E. Consumer Protection and Product Liability

The Consumer Protection Act B.E. 2522 (1979) and Product Liability Act B.E. 2551 (2008) provide additional safeguards.

They are relevant to:

Defective AI-powered products.

Misleading technology advertisements.

Unsafe autonomous devices.

Defective smart appliances.

Unfair digital service agreements.

Consumer injuries caused by defective products.

The Product Liability Act is particularly significant because qualifying injured consumers may pursue statutory liability against specified business operators without having to establish ordinary negligence in every case.

4. Principal Legal Principles of Autonomous Human-Centred Governance

A. Principle of human oversight

Autonomous systems should remain subject to appropriate human supervision.

For example, an AI medical system may recommend a diagnosis, but healthcare professionals should retain appropriate responsibility for clinical decisions.

B. Principle of informed consent

Individuals should receive understandable information concerning the collection and processing of their personal data.

Consent must satisfy applicable legal requirements and cannot simply be assumed from the use of a digital service.

C. Principle of transparency

Technology operators should provide meaningful information about automated decisions where required by applicable law.

Transparency is particularly important in:

Credit scoring.

Employment screening.

Insurance assessments.

Healthcare.

Government services.

D. Principle of algorithmic fairness

Autonomous systems should be tested for discriminatory outcomes, unreliable datasets and unfair decision-making.

E. Principle of technological accountability

Developers, manufacturers, operators and service providers should maintain appropriate records concerning system design, testing, deployment and incident response.

F. Principle of effective remedies

Individuals harmed by autonomous systems should have access to complaint procedures, regulatory remedies and judicial compensation where legally available.

5. Important Thai Case Laws and Judicial Decisions

The following six principal decisions, together with an additional contractual decision, provide useful judicial guidance for human-centred technology governance.

An important distinction is that these are not six AI-specific precedents. They are existing Thai decisions concerning digital publication, electronic identification, privacy, reputation and electronic transactions. Their principles can be applied by analogy, subject to the facts and relevant legislation.

Case 1. Prosecutor v. Chiranuch Premchaiporn (2015)

Supreme Court · Case No. อ.1167/2553

Subject: Online platform responsibility and freedom of expression

Facts:

Chiranuch Premchaiporn, director of the Prachatai online newspaper, faced proceedings concerning allegedly unlawful comments posted by users on its online discussion forum.

The prosecution relied on Section 15 of the Computer-Related Crime Act B.E. 2550 (2007), concerning service-provider responsibility.

Legal issues:

Whether an online platform operator could incur responsibility for user-generated content.

Whether the operator's response to allegedly unlawful content satisfied the applicable legal requirements.

How digital publication should be regulated without ignoring the distinction between users and platform operators.

Decision:

The proceedings ultimately resulted in a conviction and suspended sentence, following the consideration of the case through the Thai court system.

Legal significance:

Digital intermediaries can face legal responsibility under applicable statutory conditions.

Platform operators must consider their legal obligations concerning unlawful content.

Responsibility should be assessed according to the operator's actual role and conduct.

Application to human-centred technology:

An autonomous content-moderation platform should provide appropriate safeguards against wrongful removal, discriminatory moderation and the circulation of harmful material.

The case illustrates why technology operators must establish clear accountability mechanisms.

Case 2. Office of the Special Prosecutor v. Nopawan (Bento) (2013)

Criminal Court proceedings and subsequent Court of Appeal decision

Subject: Digital identity and electronic attribution

Facts:

The defendant was accused of publishing unlawful messages on an internet discussion forum using the pseudonym Bento.

The prosecution relied substantially on IP-address information and other electronic evidence.

The first-instance court acquitted the defendant because the available evidence did not establish beyond reasonable doubt that she had personally published the messages.

The Court of Appeal subsequently reversed that decision and convicted her.

Legal issues:

Whether an IP address can establish the identity of a person using an online system.

Whether electronic records can establish individual responsibility.

Whether digital attribution requires additional technical and circumstantial evidence.

Legal significance:

The proceedings demonstrate the importance of:

Reliable digital identification.

Electronic evidence.

Authentication.

Technical expert testimony.

Proper attribution of online conduct.

Application to human-centred technology:

Autonomous governance systems should not automatically attribute unlawful conduct to an individual solely because a computer account, IP address or digital identifier is associated with that person.

The case highlights the importance of protecting individuals against erroneous automated identification.

iLaw+1

Case 3. Natural Fruit Co. Ltd. v. Andy Hall (2018; appeal in 2019)

Prakanong Provincial Court · Black Case No. 1150/2557; Red Case No. 843/2559

Subject: Digital publication, reputation and civil liability

Facts:

Researcher Andy Hall made statements concerning alleged labour conditions in Thailand's food-processing industry.

The statements were communicated to a journalist and subsequently published online.

The company pursued proceedings alleging reputational injury.

The trial court found civil liability under Section 423 of the Civil and Commercial Code and awarded damages. The Court of Appeal affirmed the judgment.

Legal issues:

Whether false statements can produce civil liability.

Whether publication through digital channels can damage commercial reputation.

Whether compensation is available for legally recognised reputational injury.

Legal significance:

The decision illustrates that:

Digital publication does not remove ordinary civil liability.

False information can produce financial and reputational damage.

The circumstances and consequences of publication matter when determining liability.

Application to human-centred technology:

An AI system that automatically generates and distributes false allegations about individuals or businesses can create substantial legal risks.

The organisation responsible for deployment should have verification, correction and complaint procedures.

Case 4. Thai Supreme Court Decision No. 4403/2566 (2023)

Supreme Court · Digital intimate-image publication

Subject: Privacy, dignity and unauthorised digital distribution

Facts:

This case concerned the publication of intimate images and video involving the victim through Twitter.

The Supreme Court considered the relationship between publication-based defamation and offences involving the distribution of obscene computer data.

Legal issues:

Whether publishing intimate material online creates criminal liability.

Whether the same conduct can violate different legally protected interests.

Whether digital publication can justify compensation and other legal remedies.

Decision:

The Supreme Court recognised the separate legal interests protected by the relevant offences and upheld the consequences of the unlawful publication, including compensation.

Legal significance:

The decision reinforces the importance of:

Personal dignity.

Privacy.

Reputation.

Protection against unauthorised dissemination.

Legal remedies for digital harm.

Application to human-centred technology:

Autonomous systems must be designed to prevent the unauthorised generation, storage, reproduction and distribution of intimate or manipulated personal images.

AI-generated deepfakes and automated content-distribution services raise similar human-rights and civil-liability concerns.

ThaiLawOnline+1

Case 5. Thai Supreme Court Decision No. 976/2567 (2024)

Supreme Court · Online broadcasting and defamation

Subject: Automated digital communication and reputational protection

Facts:

The case concerned statements made during online political programmes distributed through YouTube and Facebook.

Although the plaintiff was not expressly named, the statements, considered in their overall context, were found to refer to the plaintiff.

Legal issues:

Whether online broadcasting constitutes publication.

Whether an individual can be identifiable without being expressly named.

Whether digital communication can create liability for reputational injury.

Decision:

The Supreme Court treated the online broadcasts as defamation by publication under Section 328 of the Criminal Code.

It also upheld the consequences of the publication, including a suspended sentence and publication of the judgment.

Legal significance:

The decision establishes important principles concerning:

Digital communication.

Online reputational harm.

Indirect identification.

Responsibility for published statements.

Application to human-centred technology:

AI-generated news, autonomous broadcasting systems and automated recommendation platforms should be designed to minimise the distribution of misleading statements that identify and harm individuals.

ThaiLawOnline+1

Case 6. Thai Supreme Court Decision No. 3622/2568 (2025)

Supreme Court · Electronic loan agreement and LINE communications

Subject: Electronic contracts and human intention

Facts:

The dispute involved money transferred between individuals through transactions accompanied by LINE communications.

The claimant sought recovery of two loans.

The Court distinguished between:

An electronic conversation that sufficiently evidenced a loan of THB 200,000.

A subsequent THB 100,000 transfer accompanied by a sticker response that did not adequately establish the required written evidence of a loan.

Legal issues:

Whether electronic messages can constitute written evidence of a loan.

Whether an electronic response can function as a legally relevant signature.

Whether the communication sufficiently establishes the parties' actual agreement.

Legal significance:

The decision illustrates the interaction between:

Section 653 of the Civil and Commercial Code.

Sections 7, 8 and 9 of the Electronic Transactions Act.

Electronic communication.

Contractual intention.

Evidentiary reliability.

Application to human-centred technology:

Autonomous contract-generation systems must preserve evidence of the parties' actual intentions.

A chatbot response, automated acknowledgement or digital sticker should not automatically be interpreted as consent to every contractual obligation.

The substance and context of the electronic communication remain important.

Additional Case 7. Thai Supreme Court Decision No. 1824/2567 (2024)

Supreme Court · Distance contract and jurisdiction

Subject: Remote commercial transactions and digital-era contractual relationships

Facts:

A tyre retailer in Kanchanaburi ordered goods by telephone from a supplier based in Samut Prakan.

A dispute arose concerning the unpaid purchase price and the appropriate territorial jurisdiction for proceedings.

Decision:

The Supreme Court recognised that both locations could constitute places where the contractual cause of action arose, given the circumstances of the distance transaction.

Legal significance:

The case illustrates that contracts negotiated remotely can create legally significant relationships across geographical boundaries.

Application to human-centred technology:

Autonomous commercial platforms should clearly establish contractual terms, transaction records, parties' identities and procedures for resolving cross-border disputes.

DAP Solicitors & Resolution+1

6. Civil Liability for Autonomous Technology Systems

Thailand's existing civil-law framework can address several categories of harm caused by autonomous technology.

A. Developer liability

A technology developer may face liability where negligent design, inadequate testing, foreseeable defects or other legally relevant misconduct causes injury.

Examples include:

An AI system designed without adequate safety testing.

An autonomous robot with foreseeable mechanical hazards.

A medical algorithm that fails to account for known limitations.

A system that produces systematically unreliable outputs.

B. Manufacturer liability

Manufacturers may be liable under the Product Liability Act where its statutory conditions are satisfied.

Relevant questions include:

Was the product defective?

Did the defect cause legally recognised damage?

Does the defendant qualify as a responsible business operator?

Are statutory defences available?

C. Operator liability

Operators may face liability when they fail to maintain, supervise or use technology with appropriate care.

For example, a company operating autonomous industrial equipment may face liability where inadequate maintenance creates foreseeable physical injury.

D. Corporate liability

A company cannot necessarily avoid liability by arguing that an automated system independently made the decision.

The court must examine the conduct of the company, its employees, management, contractual arrangements and the applicable statutory provisions.

E. Data-controller and processor liability

The PDPA provides specific accountability mechanisms for personal-data processing.

Controllers and processors must fulfil their respective statutory duties. The allocation of responsibilities depends on their actual roles and the relevant legal provisions.

7. Human-Centred Governance in Major Technology Sectors

A. Autonomous healthcare governance

AI-assisted healthcare raises questions about patient safety, medical negligence, informed consent and professional responsibility.

Important legal requirements include:

Appropriate clinical supervision.

Protection of medical records.

Transparent communication of material risks.

Secure processing of patient information.

Human review of consequential medical decisions.

Appropriate compensation for legally established negligence.

Example: If an autonomous diagnostic system produces an inaccurate cancer diagnosis, liability must be assessed by examining the developer's conduct, hospital procedures, medical professional responsibilities and the causal connection with the patient's injury.

B. Autonomous financial governance

AI-driven financial institutions increasingly use automated systems for lending, insurance and fraud detection.

Civil-law concerns include:

Incorrect credit assessments.

Unfair financial exclusion.

Unauthorised financial transactions.

Automated contract errors.

Personal-data misuse.

Unfair consumer agreements.

Human review and accessible complaint mechanisms are important safeguards.

C. Autonomous employment governance

AI recruitment and employee-monitoring technologies create risks involving privacy, fairness and employment rights.

Examples include:

Automated rejection of employment applications.

Facial-expression monitoring.

AI-based employee performance assessments.

Automated termination recommendations.

Biometric attendance systems.

Employers should ensure that technology does not replace their legal obligations towards employees.

D. Autonomous urban governance

Thailand's smart-city development creates new issues involving automated infrastructure and public services.

Examples include:

Facial-recognition cameras.

Intelligent traffic-management systems.

Automated public transportation.

Smart electricity networks.

Digital public-service platforms.

Governance should incorporate privacy protection, cybersecurity, safety assessment, transparency and appropriate public accountability.

E. Autonomous educational governance

AI-powered educational platforms can influence admissions, examinations and student evaluations.

Human-centred safeguards should include:

Fair assessment.

Protection of children's personal information.

Appropriate parental and student information.

Human review of consequential decisions.

Protection against discriminatory algorithms.

F. Autonomous judicial governance

AI may assist courts with document management, legal research, translation and scheduling.

However, human judges must retain judicial decision-making authority.

Technology should support judicial independence rather than replace independent legal reasoning.

8. Major Legal Challenges in Thailand

An especially important institutional issue concerns privacy litigation. Available legal commentary reports that significant publicly available higher-court PDPA judgments remain limited, with many matters handled through administrative enforcement. Consequently, the precise judicial interpretation of several PDPA civil-liability questions remains developing.

Chambers+1

9. Proposed Reforms for Thailand

Thailand could strengthen human-centred technology governance through the following reforms.

1. Human-centred AI legislation

Introduce comprehensive rules addressing high-risk autonomous systems, safety, discrimination, transparency and civil accountability.

2. Mandatory human oversight

Require meaningful human supervision in particularly consequential areas such as healthcare, employment, financial services and public administration.

3. Algorithmic impact assessments

Require appropriate assessments before deploying technologies that may significantly affect fundamental rights.

4. Clear civil-liability rules

Clarify the allocation of responsibility among developers, manufacturers, operators, distributors and service providers.

5. Stronger privacy protection

Improve enforcement of the PDPA, especially regarding biometric information, automated profiling and sensitive personal data.

6. Digital evidence standards

Develop reliable procedures for preserving source code, system logs, decision records and other relevant electronic evidence.

7. Effective consumer remedies

Provide accessible complaint procedures and compensation mechanisms for consumers harmed by autonomous technology.

8. Independent technology audits

Encourage independent testing of high-risk systems for security, reliability and discriminatory outcomes.

9. Protection of vulnerable individuals

Give particular attention to children, elderly individuals, persons with disabilities and individuals with limited digital literacy.

10. International cooperation

Align appropriate domestic standards with internationally recognised principles of trustworthy and human-centred AI governance.

10. Comparative Legal Perspective

Thailand can draw useful lessons from other legal systems.

These systems provide comparative guidance rather than automatically applicable Thai legal rules.

11. Relationship Between Human Dignity, Civil Rights and Autonomous Governance

Human-centred technology governance should be understood as a combination of civil rights and technological responsibility.

Human-centred autonomous governance model

HUMAN DIGNITY AND AUTONOMY

The foundation of technology governance

Privacy protection

Human oversight

Algorithmic fairness

System safety

CIVIL AND CORPORATE ACCOUNTABILITY

Developers · Manufacturers · Operators · Service providers

EFFECTIVE LEGAL REMEDIES

Compensation · Regulatory enforcement · Judicial protection

TRUSTWORTHY AUTONOMOUS TECHNOLOGY

12. Conclusion

Civil Law and Autonomous Human-Centered Technology Governance in Thailand represents an important developing area of civil and technological jurisprudence.

The Thai legal system already possesses significant legal foundations through the Civil and Commercial Code, Constitution, Personal Data Protection Act, Electronic Transactions Act, Consumer Protection Act and Product Liability Act.

The judicial decisions discussed above demonstrate that digital technology does not eliminate established legal principles concerning privacy, reputation, contractual intention, electronic evidence and accountability.

However, the expansion of autonomous artificial intelligence, robotics, algorithmic decision-making and smart infrastructure creates new legal questions that existing legislation may not fully resolve.

Thailand should therefore develop a more comprehensive human-centred governance framework based on five essential principles:

Human dignity: Technology must respect individual rights.

Human autonomy: Individuals must retain meaningful control over consequential decisions.

Human safety: Autonomous systems must meet appropriate safety standards.

Human accountability: Developers and operators must not escape responsibility merely because decisions are automated.

Human justice: Individuals must have effective access to remedies when technology causes legally recognised harm.

Final legal position: Autonomous technology should function as an instrument of human development, not as a replacement for human rights, civil responsibility or the rule of law. Thailand's future civil-law framework should ensure that technological progress remains compatible with dignity, fairness, safety and justice.

Research qualification: The seven decisions discussed are illustrative authorities, not seven judgments establishing an independent doctrine of AI governance. Several concern criminal or mixed proceedings, and their application to autonomous technology is analogical. No direct AI-specific holding should be attributed to these courts.