Thailand is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

Chapter 7/1 of the Ministerial Regulation (No. 2) defines "Promoted domestic manufactured supplies" as those certified as "Made in Thailand" by the Federation of Thai Industries (FTI). This certification is only granted to domestic productions, and the Approval List certified by the FTI is published. Procurement methods must align with the Public Procurement and Supplies Administration Act 2017. If certified supplies are insufficient to meet demand or if imported products are necessary, the government authority must refer the matter to the heads of the government departments for consideration. Additionally, government departments are required to spend at least 60% of their budgets on procuring domestic supplies for construction and certain non-construction work (Clause 27.3).

The Cabinet Resolutions grant privilege to the products listed as Thai Innovative Products. Since 2016, the Budget Bureau has introduced the monthly report of the 'Thai Innovation List' to develop domestic industrial capacity in several innovation-centered economic sectors. The Innovation List grants special government procurement privileges only to the products from authorised Thai majority-owned companies. The list covers products from various sectors, including electrical, electronics, and telecommunications.
The Innovation Products is prescribed in the Ministerial Regulation 2020. The products listed as Innovation Products are those that the state needs to promote or support (Clause 12). Thai governmental departments must spend at least 30% of their budget procuring the listed products (Clause 13).

According to Art. 73 of the Public Procurement and Supplies Administration Act, Thailand does not permit direct cross-border participation of foreign suppliers in its government procurement contracts. Foreign companies can participate, but they must register with the Comptroller General's Department, following the criteria, procedures, and conditions prescribed in the Ministerial Regulations Stipulating Criteria, Methods and Conditions for Consultant Registration. Clauses 4-5 of this regulation distinguish between two types of consultants: (i) freelance consultants and (ii) juristic person consultants. Generally, eligible suppliers must be juristic persons registered in Thailand, with an office in the country and at least half of the board directors holding Thai citizenship. Freelance consultants must be Thai nationals, and in the case of juristic persons, at least 51% of their total shares must be held by Thai citizens.

It is reported that the Central Bank has imposed regulatory limits on the Mosan and T-Pay systems, both of which provide e-wallet services. Specifically, for the Mosan system, the maximum account balance is USD 500, with a daily deposit cap of USD 300. For the T-Pay system, the maximum permissible transaction value is USD 300 per day, with a maximum account balance of USD 300.

It is reported that goods imported into Timor-Leste are exempt from import duties if the amount of duty that would otherwise be payable does not exceed USD 10. Given that the country applies a flat 5% tariff to all products, it can be inferred that the de minimis threshold—defined as the minimum value of goods below which customs duties are not levied—is set at USD 200. This is the threshold recommended by the International Chamber of Commerce (ICC).

Law No. 8/2016 on Consumer Protection and Decree-Law No. 12/2024 on E-Commerce and Electronic Signatures provide a comprehensive consumer-protection framework that also applies to online transactions.
Law No. 8/2016 applies broadly to goods and services supplied by domestic or foreign, public or private actors. It establishes core consumer rights, including safety, information, protection of economic interests, and protection against misleading or abusive advertising. It also requires clear pre-contractual information, provides remedies for defective goods or services, and renders unfair contractual terms null and void.
For e-commerce specifically, Decree-Law No. 12/2024 complements this regime by establishing rules applicable to online transactions. Art. 1 sets out the legal regime for electronic transactions, while Art. 2 applies the Decree-Law to e-commerce sales of goods or services to persons in Timor-Leste, without prejudice to the application of consumer-protection law. Arts. 52–53 require e-commerce providers to disclose key information on the trader, prices, delivery, cancellation, complaints, and returns, including a minimum seven-business-day return period and seller-paid returns for defective or misdescribed products.

Timor-Leste has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Timor-Leste has enacted national legislation, namely the Decree-Law No. 12/2024, which is founded upon and influenced by the standards set forth in the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Timor-Leste has enacted national legislation, namely the Decree-Law No. 12/2024, which is founded upon and influenced by the standards set forth in the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

It is reported that Timor-Leste lacks a formal regulatory framework for type approval.

Pursuant to Art. 6 of Government Decree No. 9/2008, telecom operators are required to retain user identification data—either electronically or in physical form—for a minimum duration of five years from the date of contract conclusion. In addition, Art. 7.4 stipulates that traffic data must be preserved for at least one year from the date of its generation. According to Art. 2, the term "operator" refers to any concessionaire or licensee that provides mobile telecommunications services via a subscription contract, utilising a SIM card. “Traffic data” refers to the functional data necessary to establish a connection or communication, as well as data generated during network use, including the identification of outgoing and incoming calls, call duration, and date and time.

In accordance with the schedules outlined in Annex I of the "ANC Guidelines on Registration", registrants of telecommunications services, including those providing international simple resale services, resale of leased circuit services, public internet access services, virtual private network services, managed data network services, mobile virtual network operations, IP telephony services, and satellite mobile telephone or data services, are required to maintain a register documenting the particulars of their subscribers. This register must be preserved by the registrant for a minimum duration of 12 calendar months following the termination of services to the respective subscriber. In addition, registrants of IP telephony services and satellite mobile telephone or data services shall maintain call detail records (CDRs) of all calls made and received via the service, insofar as such services are operated and/or provided within the territory of Timor-Leste, for a period of no less than 12 calendar months. Also, registrants of machine-to-machine (M2M) services are required to maintain a register containing complete and accurate records of all SIM cards utilised in connection with the provision of M2M services. These records must include, at a minimum, the international mobile subscriber identity (IMSI) number and the mobile subscriber integrated services digital network number (MSISDN) associated with each SIM card. The register shall be retained by the registrant for a period of not less than 12 calendar months from the date of termination of the M2M services to the subscriber.

In accordance with the schedules outlined in Annex I of the "ANC Guidelines on Registration", registrants of telecommunications services, including those providing international simple resale services, resale of leased circuit services, public internet access services, virtual private network services, managed data network services, mobile virtual network operations, IP telephony services, satellite mobile telephone or data services, and mobile communications on aircraft, are required to maintain a register containing records of their subscribers and their particulars. This register shall be made available for inspection by authorised government agencies of Timor-Leste, without the need for a court order.

A basic legal framework on intermediary liability for copyright infringement is absent in Timor-Leste's law and jurisprudence.