Why Legal Risk for Foreign Investors Often Starts After the Business Launch

I. Incorporation is a Legal Starting Point, Not a Risk Finish Line

Incorporating or acquiring a company in Thailand is often perceived as the final legal hurdle before business operations can fully begin. In practice, however, incorporation merely sets up the legal vehicle. Many of the most significant legal risks faced by foreign investors arise once the business begins operating through the processes of hiring staff, entering into contracts, delegating authority, and making day-to-day commercial decisions. These risks rarely stem from bad faith. More often, they arise from assumptions carried over from other jurisdictions, reliance on internal arrangements that lack legal effect under Thai law, or lack of awareness of updated legislation. Understanding where these operational blind spots lie is essential to avoiding unnecessary disputes, regulatory exposure, and long-term cost.

II. Internal authority versus external legal responsibility

Following incorporation or acquisition, companies often assume that internal arrangements such as board resolutions, internal approval matrices, or informal delegations, will be clearly understood and respected by third parties. Under Thai law, however, legal responsibility is typically determined by what is formally registered or contractually expressed, not by internal understandings. 

Common risk points include:

• Registered corporate objectives: If a company’s registered objectives with the Department of Business Development are broad, acts that fall within those objectives may be considered within the ordinary course of business. As a result, the company may be liable for obligations, such as loans or guarantees even if they relate to future business lines or even where such acts were not authorized by a valid board or general meeting resolution.

• Authorized signatories and company seal: The number of directors required to sign and whether a company seal is required must be clearly registered and consistently applied. Failure to do so can result in unintended binding obligations.

• Ultra vires as a defense against third parties is largely ineffective, although public registration still matters: Thai law prioritizes transactional certainty over internal governance failures. Unauthorized acts are not automatically invalid, and third-party protection is strong. Even where an act exceeds internal approvals, courts often prioritize registered objectives, apparent authority, and good faith reliance.

  • Under Section 1144 of the Civil and Commercial Code (CCC),  the management of a limited company is vested in the directors, subject to the Articles of Association and resolutions of the general meeting of shareholders. While such shareholder control governs the directors’ authority internally, it does not necessarily limit the company’s external liability toward third parties acting in good faith if directors or other authorized persons act within the scope of the company’s registered objectives and publicly registered authority.

• Power of attorney and informal representatives: Foreign investors often delegate power to country managers, finance personnel, consultants or even family members to act on their behalf using POAs or informal representations without appreciating how binding those acts can be. 

  • Section 1164 and 1167 of the CCC permits directors to delegate management powers to managers and expressly subjects the relationship between the company, directors, managers, and third parties to the provisions on agency (Section 797 - 806). As a result, acts performed by managers within delegated or apparent authority may bind the company vis-à-vis third parties acting in good faith notwithstanding internal restrictions or unnotified expiration of the POA.  

• Use of company assets as security without proper approvals: Local management may pledge company assets, grant guarantees or provide security for group companies, assuming they are routine or temporary. Even if shareholder or board approval was required internally under the Articles of Association or shareholder resolutions, third parties acting in good faith may still enforce such obligations where they fall within the scope of registered objectives and apparent authority.

  • Unlike an individual person, if the guarantor is a company, a contractual term can be enforced to make it jointly and severally liable for the principal’s debt under Section 681/1 Paragraph 2 of the CCC. 

  • Despite corporate liability limits, if a mortgagor is a company and a director or an authorized person pledges his or her property to secure the company’s debt, a separate suretyship contract may also force the person to act as a guarantor or pay the company’s remaining debt if it exceeds the value of the mortgaged property at the time of foreclosure under Section 727/1 Paragraph 2 of the CCC.

• Fictitious declaration of intention: Section 155 of the CCC stipulates that the declaration of will made with the connivance of the other party, and which is fictitious is null, but third parties harmed by the fictitious declaration of will and acting in good faith are protected. For example, according to the Supreme Court No. 8727/2561, registering the lease agreement worth 120,000 THB per month instead of 1,800,000 THB per month to facilitate tax evasion resulted in its nullity and inability to claim land rent and evict tenant from disputed real estate. 

• Vicarious liability for employees and representatives: Companies and managing directors are generally liable for wrongful acts committed by employees or representatives in the course of employment under Section 425 of the CCC too. Clearly defining job scope, authority limits, and internal controls is therefore crucial. Furthermore, a work for hire contract does not eliminate vicarious liability if the substance of the relationship actually reflects full-time employment or if the hirer portrays the contractor as their agent under Section 427 in conjunction with Section 425 of the CCC.

  • In addition, certain labor, social security, and work permit violations may expose directors and authorized persons to personal criminal liability, even where the company is the formal employer. 

These authority and liability issues become even more complex in the context of acquisitions, particularly in the following areas:

• Post-acquisition operational exposure: Acquirers may inherit civil, and in some cases, criminal exposure arising from acts committed prior to acquisition; for example, where a company was structured using nominee shareholders in violation of the Foreign Business Act. Therefore, applying for a foreign business license or BOI promotion or reliance on treaties such as the Treaty of Amity should be promptly considered upon detection of a nominee structure, particularly if the Ministry of Finance has issued a regulation that relaxes the foreign shareholder limits such as for insurance companies.

• Succession of shares: If a shareholder passes away, shares are automatically transferred to the heir by operation of law unless restricted by the company’s Articles of Association. This can materially affect control structures and management authority if not planned for. 

III. Contract Templates That Do Not Translate Locally

Foreign investors frequently rely on contract templates drafted under foreign law, assuming they will operate effectively in Thailand. While such contracts may appear comprehensive, certain provisions may be unenforceable, ineffective, or impractical under Thai legal principles.

Typical issues include:

• Redundant or purely declaratory clauses: Rights already provided by mandatory provisions of the CCC need not be restated, and doing so may add no legal value.

• Unenforceable or void provisions: Clauses that are deemed unfair or inconsistent with mandatory law may be void in whole or in part (Unfair Contract Terms Act B.E. 2540 (UCTA); CCC Section 152).

  • Section 68 Paragraph 2 of the Trademark Act B.E. 2534 stipulates that trademark license agreements must be written and registered; otherwise, a company is not permitted to use or sue others for the illegal use of the relevant trademark under CCC Section 152 and Supreme Court No. 6190/2550.

• Under Section 4 of the UCTA, if a contractual term causes the party that did not prescribe the standard contract form to comply or bear more burden than what could have been anticipated by a reasonable person in an ordinary circumstance, the term can be considered unfair, including: terms excluding or limiting liability that arise from breach of contract, term that makes the other and terms permitting the contract to be terminated without justifiable ground such as breach of contract.

• In contracts involving a deposit, if the forfeited amount is disproportionately high, the court has the authority to reduce it to match the actual damages incurred under Section 7 of the UCTA.

• Problematic dispute resolution clauses: Clauses requiring disputes to be resolved first by arbitration (E.g. Thailand Arbitration Center) and then by Thai courts undermine finality. Under Thai law, arbitration and court litigation are generally alternative, not sequential dispute resolution mechanisms.

•  Insufficient localization of key provisions: Governing law, jurisdiction, termination rights, limitation of liability, and liquidated damages clauses often require careful adaptation to align with Thai enforcement practice.

When contracts are not reviewed through a Thai legal lens, enforcement risks tend to surface only after disputes arise and when corrective action becomes far more costly and disruptive.

IV. Employment Practices That Unintentionally Create Legal Exposure

Employment-related issues are among the most common sources of post-incorporation risk. Foreign investors may unknowingly apply management practices that are acceptable elsewhere, but inconsistent with Thai labour law, which is highly protective of employees and subject to frequent updates. Risk commonly arises in relation to disciplinary procedures and documentation, termination processes and statutory severance, working time, overtime, and leave entitlements, and record-keeping and internal regulations. Even well-intentioned decisions can result in disputes if statutory protections or procedural requirements under the Labour Protection Act are overlooked. Independent contractors or hire contracts are sometimes used, particularly in acquisitions, to avoid assuming statutory employee entitlements. However, Thai courts assess the substance of the working relationship. If the nature of the work reflects employer control, exclusivity, and integration into the business, the individual may still be deemed an employee regardless of contractual label.

Additionally, Personal Data Protection Act (PDPA) obligations apply throughout recruitment, employment, and termination processes, including consent management and data retention. Early alignment between operational practices and Thai labour law standards is therefore critical.

V. Ongoing Compliance Is Commonly Underestimated

Incorporation creates continuing legal obligations that extend far beyond annual filings. These include licensing renewals, regulatory reporting, corporate housekeeping, and sector-specific compliance, particularly for regulated or BOI-promoted businesses. Non-compliance is rarely deliberate. It is more often caused by unclear internal allocation of compliance responsibility, compliance fatigue as the business scales, or cost-cutting during economic downturns. Over time, minor oversights can accumulate into significant regulatory, financial, or commercial consequences.

VI. Conclusion

For foreign investors, legal risk in Thailand most often arises not at the point of entry, but during everyday operations. Incorporation establishes the structure, compliance, authority control, and localized legal understanding sustain it. Addressing these issues early, before disputes or regulatory scrutiny arise, remains one of the most effective ways to protect both investment value and operational continuity. Many of these risks cannot be eliminated through documentation alone. Effective risk management requires continuous alignment between internal governance, public registration, and operational practice, especially as businesses scale or change ownership.

Disclaimer & Contact

This article is provided for general information purposes only and does not constitute legal advice. While I strive to keep my legal analysis accurate and practical, changes in law or other circumstances may affect its application. If you wish to discuss a legal or business risk, or explore how these issues may apply to your organization, you are welcome to contact me to arrange an initial discussion.

What to Expect When You Contact Me:

1. An initial, non-obligatory discussion to understand the nature of the matter

2. Confirmation of the relevant area of law and whether I am able to assist

3. If appropriate, agreement on the scope of work and applicable professional fees before any formal engagement

📩 Contact: osa.chaichit@gmail.com

Osaris Chaichit 

Attorney-at-Law (Thailand)

Notarial Services Attorney