The Compliance Map for Health and Fitness Businesses in Thailand

Thailand is one of Asia’s fastest-growing markets for gyms, boutique studios, wellness centres, medical-aesthetic clinics, and weight-management programmes. The opportunity is real, and so is the regulatory confusion: operators routinely apply for the wrong licence, or assume that one licence covers everything they do. It does not. The single most important step is to work out what your business legally is before you spend a baht on fit-out. This guide sets out the three legal categories, the build sequence for each, and the law behind them. It is general information, not legal advice; the right path depends on your facts.

Key Takeaways

• The first question is not “which licence” but “what are you.” A pure exercise gym, a spa or wellness establishment, and a medical or aesthetic clinic each sit under a different statute, and many businesses fall into more than one category at once.
• A pure exercise or fitness centre is not a “health establishment” under the Health Establishment Act B.E. 2559 (2016) and needs no health-establishment licence. The moment it adds spa, massage, sauna, or beauty services, that part of the business does.
• Anything that involves medical treatment, physiotherapy, IV therapy, injectables, or prescribing for weight loss crosses into the Medical Facilities (Sanatorium) Act B.E. 2541 (1998), and a Thai-licensed practitioner must hold the operating licence.
• Foreign investors meet the Foreign Business Act B.E. 2542 (1999): wellness and fitness services are restricted, capping foreign ownership at 49 percent unless you obtain a Foreign Business Licence, Board of Investment promotion, or qualify under the Treaty of Amity.
• From 24 January 2026, beauty, spa, massage, aesthetic, and weight-control service contracts are contract-controlled by the Consumer Protection Board: a prescribed standard-form contract, a full refund within seven days where no service has been used, and a ban on no-refund and automatic-renewal clauses. A spa or massage business is therefore caught by both the Health Establishment Act and this contract-control regime at once. Pure fitness memberships are not in this notification, but remain subject to the Unfair Contract Terms Act B.E. 2540 (1997).
• Member health and fitness data is sensitive personal data under the Personal Data Protection Act B.E. 2562 (2019); collecting it generally requires explicit consent unless another lawful basis applies.

Start here: which of the three categories are you in?

Almost every dispute over licensing in this sector comes from blurring the line between exercise, wellness, and medicine. Classify each service you intend to offer into one of three categories. You will often be in two or three of them at once, and you then need each corresponding licence.

Category 1: The pure fitness centre

A standalone gym or studio that only provides exercise, classes, and coaching is, perhaps surprisingly, not regulated as a “health establishment.” The Health Establishment Act expressly does not cover fitness businesses; it governs spa, health massage, and beauty massage. A pure gym therefore needs no health-sector operating licence for the exercise activity itself. Its compliance load is instead corporate, premises-based, contractual, and data-driven: a properly capitalised company, a compliant building, lawful membership contracts, data-protection compliance for member data, and correct work authorisation for staff. The trap is the bolt-on. Add a steam room, a massage service, or a “recovery” treatment and you have stepped into Category 2 or Category 3 for that service, and the licence follows.

Category 2: The spa and wellness establishment

If you offer spa, Thai or health massage, beauty massage, sauna, steam, or the spa-style movement services on the regulator’s list, you need a licence under the Health Establishment Act, administered by the Department of Health Service Support (HSS) of the Ministry of Public Health. Two layers apply: the establishment itself must be licensed (categorised by service area, with fees scaling by size), and the people delivering the service must be certified and registered as service providers with HSS. This is the regime most wellness resorts, day spas, and “recovery” studios fall under, and it is separate from both the gym and the medical regimes. Note that a spa or massage business is also a contract-controlled business from 24 January 2026 (see “The contract trap” below), so it must satisfy two regimes at once.

Category 3: The medical or aesthetic clinic

The moment a service becomes medical treatment, you leave the wellness regime entirely and enter the Medical Facilities (Sanatorium) Act. This covers physiotherapy, IV therapy, injectables, aesthetic medicine, diagnostics, prescribing, and medically supervised weight loss. Two licences are required: a licence to operate the facility (Sor.Por. 7, granted to the owner for ten years) and a licence to manage it (Sor.Por. 19, granted for two years), and the manager of record must be a Thai-licensed medical practitioner. Physiotherapists are separately regulated under the Physical Therapy Profession Act. Advertising of medical services requires prior approval through the medical-facility advertising-control channel. Foreign clinicians cannot freely treat the public; that is a regulated constraint, not a hiring decision, and it must be designed into the clinical model. Operators bringing advanced or specialised therapies should take specific advice early, as several modalities are restricted or prohibited in Thailand.

The foreign-ownership question

Health, wellness, and fitness services are service businesses restricted under List Three of the Foreign Business Act, so foreign ownership is capped at 49 percent unless you take one of three routes: a Foreign Business Licence from the Department of Business Development (minimum capital of at least THB 3 million for a List Three activity, with the Foreign Business Committee assessing economic and social impact); Board of Investment promotion under a wellness, health, or rehabilitation category, which can grant up to 100 percent foreign ownership with tax and work-permit privileges; or, for United States investors, the Treaty of Amity. Choosing the right route at the outset is far cheaper than restructuring later, and a Thai-majority structure that is in substance foreign-controlled risks treatment as a nominee arrangement, an area of increased enforcement attention.

The build sequence, in order

Once you know what you are, build in this order. Fit-out should not begin until the licence path is confirmed, because facility standards are part of the licence, and licensing can itself take several months.

1. Incorporate the operating company under the Civil and Commercial Code, with capital sufficient for the activity and for any foreign-ownership route.
2. Resolve the foreign-ownership position before committing capital.
3. Obtain the operating license or licences for each category you are in: the Health Establishment Act licence from HSS for spa and wellness services, and the Medical Facilities Act licences (Sor.Por. 7 and Sor.Por. 19) for any medical service.
4. Clear the premises: compliance under the Building Control Act B.E. 2522 (1979), fire safety, accessibility, and signage.
5. Paper the customer relationship correctly for the regime you are in (see “The contract trap”). This is where most operators are now exposed.
6. Build data-protection compliance for member data before you open.
7. Arrange work permits and visas for foreign staff, and confirm professional registration for any regulated practitioners.

The contract trap, tightened from 2026

From 24 January 2026, the Consumer Protection Board’s Contract Committee has made beauty, spa, massage, aesthetic, and weight-control service businesses contract-controlled. Operators in those categories must now use the prescribed standard-form contract, issued in duplicate to the customer, which gives the customer a right to a full refund within seven days where no service has been used, bans clauses that prohibit cancellation or refunds in all circumstances, and bans automatic extension of the service period without the customer’s consent. Because the notification’s definition reaches massage and spa, a Health Establishment Act spa is squarely within it. Even outside that notification, fitness membership contracts remain subject to the Unfair Contract Terms Act and the Consumer Protection Act B.E. 2522 (1979): undisclosed automatic renewals, blanket no-refund terms, and disproportionate cancellation penalties are all challengeable. Prepaid memberships and long lock-ins are exactly the terms regulators and courts scrutinise, so the membership agreement should be drafted for this regime rather than translated from a foreign template.

Member data and staff

Fitness, body-composition, and health-screening data is sensitive personal data under Section 26 of the Personal Data Protection Act, so its use generally requires explicit consent unless another Section 26 basis applies, and any transfer abroad to a parent or platform must satisfy the cross-border rules in Sections 28 to 29. On staffing, foreign trainers and managers require work permits, certain occupations are reserved for Thai nationals, regulated practitioners (physiotherapists, doctors, nurses) require their own professional registration, and labour law governs the employment terms. These are not afterthoughts; work-authorisation gaps and uncertified service providers are common grounds for enforcement.

Red flags: five signs you may be mis-classified

If any of these describe your operation, your licensing or structure may not match what you actually do, and it is worth a review before a regulator or a customer raises it:

1. You offer IV drips, injectables, or “recovery” treatments under a spa or fitness licence rather than a Medical Facilities Act licence.
2. Your spa or massage business has a Health Establishment Act licence but has not updated its customer contracts for the 24 January 2026 contract-control regime.
3. Your cap table is Thai-majority on paper, but the foreign investor controls the board and the funding.
4. Your membership or service contract is a translated foreign template with automatic renewals, blanket no-refund terms, or long lock-ins.
5. You collect member health or body-composition data without a clear lawful basis or cross-border transfer mechanism.

Where we can help

Dej-Udom & Associates advises health, wellness, and fitness operators end to end: classifying the business across the three regimes, structuring foreign ownership through a Foreign Business Licence or BOI promotion, obtaining Health Establishment Act and Medical Facilities Act licences, drafting membership and service contracts that comply with the 2026 contract-control regime, building data-protection compliance for member data, and arranging work permits for foreign staff. To arrange a confidential review of your project or your existing structure, contact [email protected] (reference: Health and Wellness).

Disclaimer: This publication is intended for general informational purposes only and does not constitute legal advice. The information contained herein should not be relied upon as a substitute for specific legal counsel. For advice tailored to your circumstances, please contact Dej-Udom & Associates directly.