Thailand’s Your Data framework is moving from policy into phased use. The Bank of Thailand plans to begin with personal deposit-account data in late 2026, then expand across other financial categories between 2027 and 2028. The covered framework includes deposits, loans, payments, e-money and credit cards.
The central idea is customer control. Instead of downloading statements, photographing documents or asking one institution to interpret another’s files, a person or business should be able to authorise standardised digital sharing with a participating provider. That may improve applications and account management, but it does not make every request safe or every product suitable.
What Changes First
The first announced stage focuses on personal deposit information near the end of 2026. A customer may be able to send records from an existing bank to another regulated provider through a participating app. Availability will depend on each provider’s implementation, so the national start window does not mean every bank and product becomes compatible on the same day.
What Comes Later
Loans and payment information, including e-money and credit-card records, are part of the wider framework, with staged expansion planned through 2027 and 2028. Other parts of the broader Your Data project already include routes for utility payment records and tax information. Each data type can support a different decision, so permission should be limited to what the service genuinely needs.
Possible Benefits
A lender could assess income and cash flow using consistent records, while a budgeting service could combine accounts into one view. Businesses may spend less time assembling statements. Customers with thin conventional credit files could show payment behaviour that was previously hard to present. These are possibilities, not promises of approval, lower rates or a better product.
Consent Should Be Specific
Read who receives the data, which accounts are included, the date range, the purpose and how long access lasts. A request for one loan application should not quietly become permanent access to every account. Look for a clear way to refuse, review or revoke consent. Save the confirmation and check whether revocation stops future access without deleting records already lawfully received.
Use Only Trusted Apps
Begin inside the official app or website of a regulated provider. Do not follow a chat link that asks for banking credentials, a one-time password or remote-control access. A genuine data-sharing flow should not require handing a password to another person. When uncertain, close the message and contact the provider through a number published on its own site or card.
Check The Receiving Provider
Data portability can make comparison easier, but a polished app does not prove that the recipient is regulated or that its product is fair. Verify the legal entity, regulator, fees, interest, cancellation terms and complaint route. For an overseas or fintech service, check whether it is actually participating in the Thai framework rather than merely using open-banking language in marketing.
Protect Expat Records
Foreign residents should expect identity, address and account-name matching to matter. A passport renewal, transliteration difference or outdated visa record can interrupt an otherwise digital process. Keep bank KYC records current and do not assume that shared transaction data replaces immigration, tax, employment or source-of-funds documents required for a separate legal purpose.
Review The Result
After sharing, inspect the application or dashboard for missing accounts, duplicate entries or an incorrect period. Automated analysis can be efficient but still misunderstand one-off transfers, reimbursements or joint finances. Ask how to correct data and challenge a decision. Keep the original bank record when the outcome affects credit, insurance, tax or another consequential service.
Know What It Is Not
Your Data is not a central government score and it does not give any company unrestricted access to all financial life. It is a mechanism for authorised sharing among participating providers. It also does not remove the need to compare product cost, protect credentials or question an unsuitable loan. Convenience should improve the process, not weaken judgement.
Prepare Now
Update contact details with banks, remove obsolete devices from mobile banking, enable strong device security and learn each provider’s fraud-reporting route. When the service appears, read the live consent screen instead of relying on a general article. Share the smallest useful set of records, record the permission and review account activity afterwards. Good digital hygiene makes the new option more useful.
Practical Information
- First phase: Personal deposit data sharing in late 2026.
- Later phases: Other financial data expands during 2027 and 2028.
- Covered categories: Deposits, loans, payments, e-money and credit cards.
- Customer action: Authorise sharing through participating provider channels.
- Safety rule: Never provide banking passwords or one-time codes to a recipient.
Keep Planning
Continue with more guides in this category, compare Thailand travel planning and check current deals before building the rest of the trip.
Questions
Does Your Data give companies automatic access?
No. The framework is based on customer-authorised sharing through standardised channels.
Will every bank launch at the same time?
Not necessarily. Provider implementation can differ within the national rollout.
Does shared data guarantee a loan?
No. A provider still applies its own eligibility, affordability and risk assessment.
Can expats use it?
Eligibility will depend on each provider, account and identity process, so check the participating service directly.