Users will be able to exercise their right to share their data via service channels including mobile applications of participating service providers and agencies, allowing them to share their information to various financial service providers.
 

·      For financial data: Users can share their data via the applications of service providers regulated by the BOT, SEC, or OIC, such as deposit accounts, payment records, outstanding loan balances, information regarding securities and mutual fund holdings, and insurance policy details. This data can be shared to other financial service providers regulated by the BOT, SEC, or OIC by 2026. 
 

·      For non-financial data: For information such as electricity/water usage and bill payment records, as well as tax filing, users will be able to download this data from the relevant agencies’ platforms and send it to financial service providers regulated by the BOT.

o  Electricity/water usage and payment records: Users can download their records via the "Tang Rat" application and share them to financial service providers. The public can access this service starting 30 June 2025.

o  Tax filing: Users will be able to download information from the Revenue Department and share it with service providers within 2025
 

Additionally, other type of data will be gradually added to allow users to utilize their data in the future.

The BOT will oversee the mechanisms for data sharing among service providers, with a focus on three key aspects:

1. Secure data management: All systems must meet BOT’s IT and security standards for data sharing.
2. Personal data privacy protection: Service providers must obtain clear and easily understood consent from users and use users’ data only for the purposes stated, as required by personal data protection laws. There are also systems in place to monitor transactions and resolve any issues in the event of data leak.
3. Consumer protection: There must be ways for users to communicate or file complaints and have their issues resolved. Standardized processes must be established, such as notifying data providers, data consumers, or relevant agencies when necessary.

The BOT will supervise the process throughout, starting by assessing whether service providers comply with these criteria and standards before allowing them to participate in the data sharing, and continuing with ongoing monitoring to ensure continued compliance.

The BOT seeks to enable users to utilize their data, facilitating data sharing between financial and non-financial sectors. Participated data providers and data consumers include:
 

1. Data providers: In the initial phase, the BOT coordinates with relevant entities as follows:

·      Entities regulated by the BOT: Commercial banks, specialized financial institutions (SFIs), payment service providers, credit card providers, and loan providers.

·      Entities regulated by the SEC or OIC: Securities companies, asset management companies, life insurance companies, and non-life insurance companies.

·      Government agencies and state enterprises: Revenue Department, Digital Government Development Agency, Metropolitan Electricity Authority, Provincial Electricity Authority, Metropolitan Waterworks Authority, and Provincial Waterworks Authority.
 

2. Data consumers: For financial sector data, the initial phase will be entities regulated by BOT, SEC, or OIC to ensure that data transmission/receiving is secure and risk management is well-executed. While these regulated service providers currently have sufficient number and potential to develop services beneficial to the wider public, including in the areas of credit, investment, insurance, and financial planning.