1. Introduction

Biological Age Data Ownership in Thailand is an emerging area of civil law concerned with the legal rights, control, protection, use, transfer, and commercial exploitation of information that indicates the biological condition and ageing process of an individual.

Biological age is different from chronological age. Chronological age measures the number of years a person has lived, whereas biological age estimates the condition of the body through scientific indicators such as:

DNA methylation and epigenetic markers.

Telomere length and cellular ageing.

Blood biomarkers and metabolic indicators.

Genetic and genomic information.

Cellular regeneration and tissue deterioration.

AI-generated longevity and biological-age predictions.

For example, a person may be chronologically 40 years old but receive an AI-generated biological-age estimate of 33. Such information can become relevant to medical treatment, insurance, employment, scientific research, commercial longevity services, and personal identity.

The central legal question is: Who has the legal right to control biological-age information—the individual from whom it originates, the laboratory that generates it, the hospital that stores it, or the technology company that analyses it?

Thai law does not establish a separate, comprehensive ownership regime for biological-age data. The issue must therefore be examined through personal-data protection, medical confidentiality, privacy, contractual rights, intellectual property, and civil liability.

2. Legal Framework in Thailand

A. Personal Data Protection Act B.E. 2562 (2019)

The Personal Data Protection Act (PDPA) is the principal legal framework governing biological-age information in Thailand.

Biological-age data can constitute personal data when it identifies or can identify an individual.

More importantly, biological-age information derived from health examinations, genetic testing, or physiological measurements may qualify as sensitive personal data concerning health under Section 26.

Important protections include:

Section 19 – Consent: Consent must satisfy the statutory requirements where consent is the applicable legal basis.

Section 23 – Transparency: Data controllers must provide the required information about collection and processing.

Section 26 – Sensitive personal data: Processing health-related sensitive data generally requires explicit consent unless a statutory exception applies.

Section 27 – Processing restrictions: Personal data cannot be used or disclosed outside the applicable lawful grounds.

Section 30 – Right of access: Individuals can request access to their personal data.

Section 31 – Data portability: Individuals have portability rights subject to statutory conditions.

Section 33 – Right to erasure: Individuals may request erasure in circumstances specified by law.

Section 35 – Accuracy: Data controllers must maintain appropriate accuracy and currency.

Section 37 – Security: Controllers must implement appropriate security measures.

The important distinction is that the PDPA creates rights over the processing of personal data. It does not automatically declare that every individual owns every database, algorithm, laboratory report, or analytical model containing their biological-age information.

B. National Health Act B.E. 2550 (2007)

Section 7 establishes confidentiality protection for personal health information.

Health information cannot generally be disclosed in a manner that may cause damage to the individual unless the individual has expressed consent or disclosure is otherwise authorized by law.

This is particularly important for biological-age databases maintained by:

Hospitals and medical laboratories.

Genetic-testing institutions.

Longevity and anti-ageing clinics.

Universities and biomedical research centres.

Digital healthcare and biotechnology companies.

A laboratory cannot assume that receiving a biological sample gives it unrestricted authority to disclose the individual's biological-age results.

C. Constitution of Thailand B.E. 2560 (2017)

Constitutional privacy protections provide an important foundation for biological-age data rights.

Section 32 protects personal privacy, dignity, and family rights. These protections support arguments against unauthorized collection, disclosure, or exploitation of biological information.

Biological-age information may reveal sensitive details about an individual's health, physical condition, genetic characteristics, and potential future health risks.

D. Civil and Commercial Code

The Thai Civil and Commercial Code provides additional remedies where biological-age information is misused.

Section 420 – Wrongful acts

A person who wilfully or negligently unlawfully injures another person's life, body, health, liberty, property, or rights may incur civil liability.

Examples include:

Unauthorized disclosure of biological-age reports.

Negligent handling of biological samples.

Unauthorized commercial exploitation of personal health information.

Improper transmission of sensitive biological data.

Section 421 – Abuse of rights

The exercise of a right that has as its predominant purpose the causing of injury to another person may constitute an unlawful exercise of rights.

Section 423 – False statements

This provision may become relevant where false statements about an individual's biological condition or ageing status damage that person's reputation or interests.

Section 425 – Employer liability

An employer may be jointly liable for wrongful acts committed by an employee in the course of employment, subject to the statutory requirements.

E. Intellectual Property and Database Rights

Biological-age information creates a distinction between the underlying information and the technology used to process it.

For example:

An individual's actual biological-age measurements are personal information.

A laboratory's original analytical software may receive intellectual property protection.

An independently developed AI prediction model may qualify for applicable intellectual property protection.

A sufficiently original database structure may receive copyright protection.

Scientific discoveries and naturally occurring biological facts are not automatically privately owned inventions.

Consequently, a biotechnology company may have rights in its software without acquiring unrestricted ownership of the personal biological information processed through that software.

3. Meaning and Nature of Biological Age Data Ownership

Biological-age data ownership involves several overlapping legal interests.

An important legal distinction is that data protection rights do not necessarily equal absolute property ownership.

An individual may have enforceable rights to access, correct, protect, and restrict certain uses of biological-age information without owning the laboratory's physical equipment, analytical software, or entire database.

4. Major Legal Issues

A. Individual ownership versus laboratory ownership

One of the most important disputes concerns whether a laboratory becomes the owner of biological-age information after testing a person's blood or DNA.

For example, a person provides a blood sample to a Thai medical laboratory. The laboratory analyses the sample and generates a biological-age report.

Three separate interests arise:

The individual has personal-data and confidentiality rights.

The laboratory has contractual and professional responsibilities.

The laboratory may have intellectual property rights in its analytical processes and software.

The laboratory's possession of the sample does not automatically give it unrestricted ownership or commercial-use rights over the individual's personal information.

B. Biological-age data and informed consent

Informed consent is essential when biological-age information is collected and used for different purposes.

A patient may consent to testing for personal medical purposes without consenting to:

Commercial longevity research.

Pharmaceutical marketing.

Insurance risk profiling.

Employment screening.

Genetic research.

AI training and commercial model development.

Consent for one purpose should not automatically be treated as authorization for every subsequent purpose.

C. Commercial exploitation of biological-age information

Biotechnology companies may use biological-age information to develop:

Longevity prediction platforms.

Anti-ageing products.

Pharmaceutical research.

Personalized healthcare services.

AI-based health assessments.

Commercial biological-age databases.

Commercial use must comply with applicable data-protection requirements and the relevant legal basis for processing.

The individual does not automatically receive a share of every commercial profit generated using lawfully processed personal data. However, unauthorized processing, contractual violations, or wrongful exploitation may create legal remedies.

D. AI-generated biological-age predictions

AI systems may produce different biological-age estimates from the same person's data.

For example:

Laboratory A estimates biological age at 36.

Laboratory B estimates it at 41.

An AI longevity platform estimates it at 34.

This raises questions about scientific reliability, transparency, accuracy, and responsibility.

Under the PDPA, controllers must take appropriate measures concerning the accuracy of personal data. Where an AI-generated estimate is misleading, the individual may have grounds to challenge its accuracy and seek correction where the statutory requirements are met.

E. Inheritance and posthumous biological-age data

Biological-age records may remain relevant after a person's death.

Examples include:

Genetic information relevant to descendants.

Biological samples preserved in research institutions.

Medical records required for succession disputes.

Data relating to inherited diseases.

Longevity research involving deceased individuals.

The legal treatment of stored samples, confidential medical information, and data concerning deceased persons must be distinguished. The PDPA's ordinary definition of personal data concerns living individuals, but confidentiality, contractual, medical, research, and third-party privacy interests may continue to matter.

F. Unauthorized transfer and international data sharing

Thai biotechnology companies may transfer biological-age information to foreign research institutions or cloud service providers.

Such transfers must be assessed under the PDPA's international-transfer provisions, particularly Section 28 and the applicable safeguards and exceptions.

A company cannot avoid Thai privacy obligations merely by storing biological-age information on a foreign server.

5. Case Laws and Judicial Precedents

Important qualification: Thailand has no clearly established body of reported Supreme Court decisions specifically recognizing ownership of biological-age data. The following Thai judgments address closely related questions, while the foreign judgments provide comparative principles concerning biological materials, genetic information, medical records, and data control. They should not be presented as direct Thai biological-age ownership precedents.

Case 1. Supreme Administrative Court – Judgment No. A.587/2562

THAILAND · MEDICAL RECORDS AND INFORMATION RIGHTS

Facts: A patient requested medical records from Siriraj Hospital, affiliated with Mahidol University. The records had been lost, and the hospital failed to adequately follow up or recover them.

Legal issue: Whether the hospital's failure to maintain and provide medical records constituted a wrongful administrative act.

Decision: The Supreme Administrative Court found that the hospital had neglected its legal responsibilities and violated the claimant's right to receive information. Compensation was payable under Section 5 of the Liability for Wrongful Acts of Officials Act B.E. 2539 (1996).

Relevance: Biological-age reports are a form of potentially sensitive medical information. This judgment supports the importance of proper medical-record management and access to patient information.

Case 2. Thai Supreme Court Judgment No. 7073/2559 (2016)

THAILAND · DNA EVIDENCE AND FAMILY RIGHTS

Facts: Children sought a judicial declaration of legitimacy to obtain benefits connected with their deceased alleged father. DNA testing was used to establish the biological relationship.

Legal issue: Whether DNA evidence could establish parentage when direct DNA testing of the alleged father was unavailable.

Decision: The Supreme Court accepted the admissibility and evidentiary value of DNA testing under Section 128/1 of the Civil Procedure Code, together with the relevant juvenile and family court provisions. Alternative genetic comparison with the alleged father's father could be considered alongside other evidence.

Relevance: The judgment demonstrates that genetic information can have significant legal consequences concerning identity, family relationships, and inheritance-related interests.

It does not, however, decide ownership of DNA or biological-age data.

Case 3. Thai Supreme Court Judgment No. 10842/2558 (2015)

THAILAND · GENETIC TESTING AND PROCEDURAL RIGHTS

Facts: A dispute arose concerning the expenses associated with genetic testing in judicial proceedings.

Legal issue: Whether the costs of DNA testing should be treated as court expenses.

Decision: The Supreme Court recognized that the costs of genetic testing fall within the relevant court-fee framework under Section 128/1 of the Civil Procedure Code and that the court must determine responsibility for those expenses under the applicable procedural rules.

Relevance: The case illustrates that genetic testing is not merely a scientific activity. It can create legally recognized procedural and financial consequences.

It is relevant by analogy to disputes over who should pay for biological-age testing and related expert examination.

Case 4. Moore v. Regents of the University of California (1990)

UNITED STATES · HUMAN TISSUE AND COMMERCIAL EXPLOITATION

Facts: John Moore underwent medical treatment involving the removal of his spleen. His physicians subsequently used his biological materials to develop a commercially valuable cell line without adequately informing him about the research and financial interests involved.

Legal issue: Whether Moore retained a property interest in the removed biological materials and whether the doctors had violated their fiduciary duties.

Decision: The California Supreme Court rejected Moore's conversion claim based on continuing ownership of the excised cells. However, it recognized that claims involving lack of informed consent and breach of fiduciary duty could proceed.

Relevance to Thailand: The judgment demonstrates the distinction between ownership of biological materials and an individual's rights to informed consent and protection against undisclosed commercial exploitation.

A Thai patient should not assume that donating a biological sample gives a laboratory unlimited authority to use the resulting information.

Case 5. Greenberg v. Miami Children's Hospital Research Institute (2003)

UNITED STATES · GENETIC RESEARCH AND DONOR INTERESTS

Facts: Families affected by Canavan disease contributed biological materials and assisted research into identifying the genetic cause of the disease. Researchers subsequently developed and patented genetic testing technology.

Legal issue: Whether the contributing families and organizations could claim ownership-based and other legal remedies concerning the genetic research and its commercialization.

Decision: The federal district court rejected important ownership and conversion theories concerning the contributed biological materials and genetic information. The case also examined claims involving informed consent, fiduciary duties, and unjust enrichment.

Relevance to Thailand: The case demonstrates the importance of clearly explaining the purpose of biological sample collection and the potential commercial uses of research results.

Biological-age research institutions should establish transparent consent procedures before using patient information for commercial research.

Case 6. Washington University v. Catalona, 490 F.3d 667 (8th Cir. 2007)

UNITED STATES · BIOLOGICAL SAMPLE OWNERSHIP

Facts: Patients contributed biological samples for prostate cancer research conducted through Washington University. A dispute arose when a former researcher sought to transfer the samples to another institution.

Legal issue: Whether the donors retained ownership rights enabling them to direct the transfer of biological samples.

Decision: The Eighth Circuit upheld the university's ownership of the donated biological materials under the circumstances, finding that the donors had made valid donations to the institution.

Relevance to Thailand: The decision illustrates that ownership and control of physical biological samples may depend on the donation arrangement, consent documentation, and applicable institutional law.

However, ownership of a physical sample must be distinguished from personal-data protection rights in the information extracted from it.

Case 7. Association for Molecular Pathology v. Myriad Genetics, 569 U.S. 576 (2013)

UNITED STATES · GENETIC INFORMATION AND INTELLECTUAL PROPERTY

Facts: Myriad Genetics identified the BRCA1 and BRCA2 genes and obtained patents concerning isolated genetic sequences and complementary DNA.

Legal issue: Whether naturally occurring DNA sequences could be patented merely because researchers had isolated them.

Decision: The United States Supreme Court held that naturally occurring DNA sequences were not patentable merely because they had been isolated. Synthetically created complementary DNA (cDNA), however, could qualify for patent protection because it was not naturally occurring.

Relevance to Thailand: This decision is significant for distinguishing naturally occurring biological information from independently created technological innovations.

A biotechnology company should not automatically claim exclusive ownership over naturally occurring biological characteristics simply because it has developed a method to measure or identify them.

Case 8. Sorrell v. IMS Health Inc., 564 U.S. 552 (2011)

UNITED STATES · MEDICAL DATA AND COMMERCIAL USE

Facts: Pharmaceutical data-mining companies obtained prescription-related information identifying prescribing doctors and used the information for commercial marketing purposes.

Legal issue: Whether restrictions on the sale and use of prescriber-identifying information violated constitutional free-speech protections.

Decision: The Supreme Court struck down Vermont's particular restrictions because they imposed unconstitutional content- and speaker-based burdens on protected expression.

Relevance to Thailand: Although this was not a biological-age ownership dispute, it demonstrates the legal tensions between medical information, commercial data markets, privacy, and the regulation of information use.

Thailand's PDPA provides a different statutory framework, particularly for sensitive health and genetic information.

6. Civil Liability for Unauthorized Biological-Age Data Use

Thai civil law provides several potential avenues of legal protection.

A. PDPA civil compensation

Section 77 provides for civil liability where a data controller or processor causes damage through a violation of the PDPA or its implementing rules.

Section 78 permits the court, where appropriate, to award punitive damages in addition to actual damages, subject to the statutory limit of twice the actual damages.

This is particularly relevant when biological-age information is improperly disclosed to insurance companies, employers, commercial laboratories, or third-party data brokers.

B. Breach of contractual obligations

A patient may have a contractual relationship with a hospital or laboratory.

Where a laboratory promises confidentiality or limits its services to a specified testing purpose, unauthorized secondary use may create contractual liability.

The contractual arrangement should clarify:

Ownership and custody of physical samples.

Access to test results.

Permitted research purposes.

Data-retention periods.

Third-party disclosures.

Commercial use.

Deletion and destruction procedures.

C. Compensation for reputational and economic damage

Unauthorized biological-age disclosure may cause economic and non-economic harm.

Examples include:

Insurance rejection or increased premiums.

Employment discrimination.

Loss of commercial opportunities.

Psychological distress.

Damage to personal reputation.

Unauthorized use in commercial advertising.

The availability and extent of compensation will depend on the applicable statutory requirements, evidence, causation, and the nature of the injury.

7. Rights and Responsibilities of Different Stakeholders

8. Practical Examples of Biological-Age Data Ownership Disputes in Thailand

Example 1: Unauthorized sale of biological-age reports

A Bangkok laboratory collects blood samples from 5,000 individuals and creates biological-age profiles. It subsequently sells the profiles to a private insurance company without an appropriate legal basis.

Legal analysis:

PDPA Section 26 may apply because the information concerns health.

Section 27 restricts unauthorized processing and disclosure.

Sections 77 and 78 may provide civil remedies.

CCC Section 420 may become relevant if the conduct constitutes an unlawful wrongful act causing damage.

The individuals may seek appropriate remedies depending on the facts and applicable exceptions.

Example 2: Ownership dispute involving AI-generated age predictions

A healthcare technology company develops an AI system that calculates biological age using patient blood reports.

A patient claims that the company cannot commercially exploit the patient's biological-age information.

Legal analysis:

The patient has personal-data protection rights. The company may have intellectual property rights in its independently developed software and analytical technology.

Neither interest automatically extinguishes the other.

The legality of the company's use depends on the purpose, legal basis, consent where required, contractual terms, and other PDPA requirements.

Example 3: Biological-age information used for employment screening

A Thai employer requests biological-age reports from job applicants to identify individuals considered biologically older than their chronological age.

Legal analysis:

Health information may qualify as sensitive personal data.

Section 26 imposes strict processing requirements.

Section 27 regulates subsequent use and disclosure.

The employer must establish a lawful basis and comply with applicable safeguards.

An applicant's willingness to undergo a medical examination does not automatically authorize every possible use of the resulting information.

Example 4: Commercial longevity research

A Thai research institute collects biological-age information from volunteers and uses it to develop a commercial longevity product.

The original consent documentation authorizes academic research but does not clearly explain commercial product development.

Legal analysis:

The institution must examine whether its new purpose is compatible with the original collection purpose and whether it has a valid legal basis for the further processing.

The PDPA's research-related exceptions must be assessed against their specific conditions and safeguards. A research label alone does not provide unlimited permission to commercialize sensitive personal information.

9. Challenges in Biological-Age Data Ownership Law

A. Absence of a specific ownership statute

Thailand has no dedicated statute establishing comprehensive ownership rights over biological-age measurements, epigenetic clocks, or longevity predictions.

B. Conflict between patient rights and institutional interests

Hospitals may need to retain records for legal, medical, and professional reasons, even where patients request deletion.

Consequently, access, deletion, and retention rights must be assessed under the applicable statutory exceptions.

C. Scientific uncertainty

Biological-age measurements are estimates rather than definitive measurements of an individual's actual remaining lifespan.

Different testing methods may produce different results.

D. Commercialization of personal biological information

The development of longevity technology creates new conflicts involving research institutions, private companies, investors, and individuals.

E. International data transfers

Cross-border biotechnology research creates challenges concerning foreign processors, international transfers, security, and accountability.

F. Lack of specialized judicial precedent

Thai courts have addressed medical-record access and DNA evidence, but biological-age data ownership remains an emerging legal issue. The comparative judgments discussed above therefore offer interpretive guidance rather than binding Thai rules.

10. Recommendations for Thailand's Legal Framework

Thailand could strengthen biological-age data governance through the following reforms.

1. Recognition of individual biological-data rights

Introduce express statutory recognition of an individual's continuing rights over biological-age information, including access, correction, privacy, and control of authorized disclosures.

2. Biological-data consent framework

Require clear and purpose-specific consent for sensitive activities, particularly:

Genetic and epigenetic research.

Commercial longevity services.

AI model training.

Insurance-related assessments.

International research collaboration.

3. Laboratory accountability

Require medical laboratories to maintain transparent policies concerning the collection, storage, processing, retention, and destruction of biological samples and associated data.

4. AI transparency

Require appropriate explanations of biological-age prediction methods, limitations, reliability, and significant changes to analytical systems.

5. Commercial-use safeguards

Establish clearer rules governing commercial licensing, secondary use, and sharing of biological-age information.

6. Stronger remedies

Develop effective compensation mechanisms and procedures for unauthorized biological-data exploitation, discrimination, and security failures.

7. Posthumous data governance

Clarify the treatment of deceased persons' biological samples and health information, while protecting the privacy interests of living relatives.

11. Overall Legal Position

The following principles provide a useful summary of the current legal position:

12. Conclusion

Civil Law and Biological Age Data Ownership in Thailand represents an important emerging intersection of civil liability, privacy, medical confidentiality, biotechnology, artificial intelligence, and intellectual property.

The Personal Data Protection Act B.E. 2562 (2019), National Health Act B.E. 2550 (2007), Constitution of Thailand B.E. 2560 (2017), and Civil and Commercial Code collectively provide the foundation for regulating biological-age information.

The most important legal distinction is between ownership of biological materials, ownership of technological innovations, and an individual's legal rights over personal biological information.

The Thai judgments concerning medical records and DNA evidence provide relevant domestic foundations. The comparative decisions in Moore, Greenberg, Catalona, Myriad, and Sorrell demonstrate the different legal approaches to biological materials, genetic research, commercial exploitation, and medical information.

Ultimately, Thailand should develop a clearer statutory framework that protects individuals against unauthorized exploitation while allowing responsible scientific research and biotechnology innovation.

13. Important Case Law Reference Summary

Research qualification: The first three are Thai judicial authorities, not judgments establishing biological-age data ownership. The remaining five are foreign comparative precedents. Their principles are persuasive research material, not binding Thai judicial determinations.

The statutory analysis above is based on the Thai PDPA's provisions on sensitive personal data and data-subject rights.

pdpa.dmh.go.th+2

The medical-record judgment is documented by the Thai Administrative Court.

en.admincourt.go.th

The DNA judgments are summarized in Thai legal materials.

ThaiLawOnline

The comparative ownership and intellectual-property cases are documented in their respective judicial materials.

Justia Law+4