As demand for cloud computing, AI infrastructure, and regional data hubs continues to grow, Thailand has emerged as an increasingly attractive destination for data center investments in Southeast Asia. However, from a legal and regulatory perspective, the key challenge for foreign investors is not technical capability, but structuring—particularly how to lawfully operate a data center business and data center related-business(such as engineering service) in Thailand while maintaining 100% foreign ownership.

Under Thailand’s Foreign Business Act B.E. 2542 (1999) (FBA), many service-related businesses are restricted or subject to foreign ownership limitations. Against this backdrop, Thailand Board of Investment (so-called “BOI”) promotion has become the most practical and reliable legal solution for foreign data center operators seeking full ownership and operational flexibility in Thailand.

This article outlines why BOI promotion matters, how it applies to data center businesses, and the key structuring issues foreign investors should consider at an early stage.

Why Data Center Businesses Face Foreign Ownership Issues

From a legal standpoint, a data center business does not automatically fall within a single regulatory category. Depending on how the business model is structured, activities may be viewed as:

• Infrastructure or facility operation;

• Data processing or hosting services; and/or

• Managed IT or cloud-related services.

If improperly structured or broadly defined, certain service components may fall under restricted service businesses under the Foreign Business Act, triggering a 49% foreign ownership cap or the need for a Foreign Business License (“FBL”) – a route that is often time-consuming and uncertain in outcome.

For capital-intensive projects such as data centers, this regulatory uncertainty can materially affect investment feasibility, financing, and exit planning.

BOI Promotion A Statutory Exception to Foreign Ownership Restrictions

BOI promotion offers a statutory exemption from foreign ownership restrictions under the FBA. For qualifying activities, a BOI-promoted company may be 100% foreign-owned, even if the underlying business would otherwise be restricted.

Importantly for data center operators, BOI has expressly recognised data center activities as eligible promoted businesses, subject to specific technical and investment criteria.

From a legal structuring perspective, BOI promotion is often the cleanest and most defensible route for foreign investors seeking long-term certainty.

Key BOI Benefits for Data Center Operators

For foreign data center investors, BOI promotion offers several critical advantages:

• Foreign Ownership: BOI-promoted companies are exempt from foreign shareholding limits, allowing full foreign control without nominee risks or complex joint venture arrangements

• Conduct Restricted Activity: Promoted companies may engage in businesses otherwise restricted under the FBA without applying for a Foreign Business License.

• Tax Incentives: BOI incentives include (a) Corporate income tax exemptions, and (b) Import duty exemptions on machinery and equipment

• Land Ownership: Promoted companies will be permitted to own land required for their promoted business activities.  

• Visa & Work Permit Facilitation: BOI promotion simplifies immigration and work permit processes for foreign executives and technical specialists.

BOI Requirements for Data Centre Projects

While BOI is generally receptive to data center investments, approval is not automatic. Applications are assessed on both legal and technical grounds. Common requirements include:

Infrastructure and Technology

• Tier-standard data center design (e.g. redundancy, uptime, disaster recovery);
• Robust cybersecurity and system resilience measures;
• Scalable infrastructure to support future digital demand.

Energy and Environmental Requirements

Given the energy-intensive nature of data centers, BOI strongly encourages:

• Energy-efficient systems;
• Use of renewable or clean energy sources; and
• Environmental impact mitigation measures.

Legal and Regulatory Compliance

Operators must ensure compliance with:

• Personal Data Protection Act (PDPA);
• Cybersecurity laws and sector-specific regulations;
• Licensing and zoning requirements at the local level.

Projects demonstrating alignment with ESG and sustainability principles may receive preferential consideration

Based on the current requirements of the BOI, the project will be eligible for the higher tax privileges if the data center meets their targeted criteria, including:

• Having Power Usage Effectiveness (“PUE”) not exceeding 1.3
• Having Minimum IT load of 2 MW
• Provide services such as server co-location, managed service, customer’s backup service, disaster recovery services, data hosting service
• Having at least 4 systems of high-speed telecommunication (at least 3 domestic systems), each with at least 10 Gbps capacity, and at least 60 Gbps combined
• Obtaining ISO/IEC 27001
• Employing at least 50% Thai personnel in management/expert positions

From a legal standpoint, it is critical that the scope of business activities stated in the BOI application aligns with the company’s actual operations and future expansion plans. Overly narrow descriptions may limit growth, while overly broad descriptions may raise regulatory concerns. Early legal assessment is critical to avoid regulatory delays post-approval.

Structuring Considerations Beyond BOI Approval

Foreign investors often focus heavily on BOI approval itself, but experienced deal counsel will look beyond approval to long-term implications, including:

• Land acquisition vs long-term lease structures;

• Power purchase agreements and utility arrangements;

• Change of shareholding or control restrictions under BOI conditions; and

• Ongoing compliance obligations and reporting to BOI.

Why BOI Is Usually Preferable to Other Legal Routes

In practice, alternative structures, such as (i) applying for a Foreign Business License, or (ii) forming a Thai-majority joint venture, often introduce approval risk, control limitations, or long-term legal exposure. For data center businesses involving substantial capital investment and long asset lifecycles, BOI promotion typically offers greater regulatory certainty, investor protection, scalability, and incentives.

Key Takeaways

• Data center businesses in Thailand can raise foreign ownership and regulatory issues if not properly structured.

• BOI promotion provides a clear legal pathway for 100% foreign ownership.

• Early classification and structuring are critical to avoid future regulatory and M&A complications.

• Legal advice at the planning stage can materially affect approval timelines, operational flexibility, and exit strategy.

Final Thought

As Thailand continues to position itself as a regional digital infrastructure hub, data center investments are expected to increase in scale and complexity. For foreign investors, success often depends not only on technology and capital, but on getting the legal structure right from day one.