Updates on Thailand’s Anticorruption for Securing High-Value Projects

Businesses aiming to win large-scale government contracts are now operating under far stricter anticorruption expectations. Thailand’s latest regulatory update clearly demonstrates that compliance is no longer optional, but a prerequisite for doing business.

On April 10, 2026, the Anti-Corruption Cooperation Committee (ACCC) published a landmark update to its regulatory framework: “Announcement re: Procurement Limits and Minimum Anticorruption Standards (No. 2),” which replaces and amends key provisions of the original announcement dated September 25, 2024. Effective May 10, 2026, these rules sought to redefine the landscape for private entities bidding on state projects worth over THB 300 million (approx. USD 9.3 million).

Anticorruption is no longer limited to direct bribery or obvious misconduct. It now extends to complex relationships, indirect benefits, and ongoing compliance obligations throughout the entire project lifecycle, making robust due diligence not only essential, but indispensable to participating in public procurement. 

From formal ties to substantive relationships

While the previous regulation focused primarily on direct family or business relationships, the update adopts a far more granular and expansive definition of what constitutes a “Conflict of Interest

Today, the regulation applies to:

• Unregistered partners or cohabiting relationships
• Shareholding in competing businesses bidding for the same project
• Indirect affiliations that may influence decision-making

This shift reflects a more aggressive regulatory approach, signaling a move beyond surface-level disclosures toward deeper scrutiny of corporate relationships and interests.

“The Final Payment” mandate

Under the 2024 regime, the timeline for maintaining anticorruption certifications was often ambiguous, leading to lapses during the middle of long-term projects. The “Final Payment Rule” introduced by the revised framework eliminates this ambiguity with the “Final Payment Rule.”

Companies or bidders must now ensure their anticorruption policies and certifications remain valid from the day the bid is submitted until final payment under the contract is made.. If a certification is set to expire mid-project, the contractor is legally required to submit a new self-audit and supporting evidence to the state agency before it expires. Non-compliance can lead to more than fines: it may legally delay the release of final payment installments, directly jeopardizing the project’s profitability.

Self-audit

State agencies now have mandatory administrative duty to incorporate these anticorruption requirements directly into the Scope of Work. This means that “Minimum Anticorruption Standards” are now a primary qualification criterion—equivalent to technical capability or financial health. The self-audit form has been completely overhauled for 2026. To pass the qualification stage, businesses must provide concrete evidence of:

• Active Monitoring: Designated units or personnel specifically tasked with anticorruption compliance.
• Whistleblower Protection: Functional systems that allow for anonymous reporting without risk of reprisal.
• Regular Training: Documented annual training plans reflecting active workforce communication and implementation of the policy.
• Triennial Reviews: A mandatory policy review at least once every three years to ensure continued alignment with evolving corruption risks.

Where due diligence sits within these changes

The 2026 announcement issued by the Anti-Corruption Cooperation Committee fundamentally changes the nature of compliance under Section 19. Beyond internal certification or existing policy, the requirement now demands demonstrable, auditable evidence, including active monitoring mechanisms, verifiable whistleblowing channels, documented training records, and periodic policy reviews.

For bidders exceeding the THB 300 million threshold, the self-audit submission is not a formality but a quasi-regulatory disclosure subject to scrutiny comparable to financial and technical evaluation. 

This is critical: Internal compliance frameworks, even when well-designed, are inherently limited by information asymmetry. They rely on declared data, formal records, and employee disclosures. However, the expanded scope of conflict-of-interest under the 2026 framework—covering informal relationships, undisclosed domestic partnerships, and indirect business linkages—extends beyond what internal systems can reliably detect.

In this context, the risk is not theoretical. A single undisclosed relationship—particularly one that is not captured in official registries—can result in immediate disqualification. More critically, under the enforcement of the “Final Payment” condition, non-compliance identified post-award can lead to suspension of payment, effectively transferring regulatory risk into direct financial loss.

This is where independent due diligence shifts from being supportive to structurally necessary. Unlike internal reviews, independent due diligence operates on verification rather than declaration. It integrates open-source intelligence, field-level inquiries, and network analysis to test the accuracy and completeness of disclosed information. This is particularly relevant in foreign or complex operating environments, where informal relationships and non-transparent affiliations are common and rarely documented.

Practically, this enables three critical functions:

• Substantiation of disclosure: validating that declared relationships, ownership structures, and affiliations withstand external scrutiny;
• Detection of undisclosed risk: identifying hidden conflicts that would not surface through internal reporting channels;
• Defensibility of submission: ensuring that the self-audit package is not only complete, but capable of withstanding regulatory challenge.

In effect, due diligence transforms the self-audit from a compliance document into a defensible position. Under the current regulatory standard, the question is no longer whether a company has policies in place, but whether it can prove—independently and convincingly—that those policies reflect reality. Without external verification, that proof is inherently incomplete.

In high-value public procurement, where disqualification or payment suspension can eliminate the entire economic value of a project, due diligence is not an additional safeguard. It is the mechanism that ensures compliance is credible, complete, and enforceable.