Opening & Running a Compliant Clinic or Medical Facility in Thailand

Sanatorium and clinic licence categories, and who may apply

The Sanatorium Act separates clinics by declared service type — general medical clinics, specialist medical clinics, dental clinics, nursing and midwifery clinics, and medical technology clinics — and each licence category fixes the boundary of what may lawfully be offered inside. Most aesthetic clinics in practice register as specialist medical clinics under dermatology or plastic surgery rather than as a separate category. Choosing the wrong category at the outset means procedures actually delivered on the premises can exceed the scope the licence covers, which can trigger a suspension order even where the procedure itself raises no clinical concern at all.

The person or entity applying for the facility licence — the licensee — need not be a licensed practitioner and can simply be an investing company, but the licensee must appoint an operator who holds the qualifying professional licence for that service category and answers for clinical standards on the premises day to day. This split lets non-clinical investors take an equity stake, but it also means the contract between licensee and operator must spell out who answers for what, because when a clinical complaint arises, the appointed operator is invariably the first person the regulator calls in for questioning.

The premises and medical equipment must pass inspection before the licence issues and must remain materially unchanged for its duration. Extending floor space, relocating a procedure room, or adding equipment classified as controlled medical devices — certain high-power lasers, for instance — requires notifying or amending the licence file before the equipment goes into use. Many clinics buy new equipment and start treating patients on it first, notifying the regulator only afterwards, which quietly turns every treatment given in that window into service delivered outside the licensed scope.

Advertising medical services and the risk from before/after claims

Every clinic advertisement — signage, website copy, or social media posts — must have its text and imagery cleared before publication, and the single most commonly breached rule is using before-and-after imagery to tout treatment results, because the regulator treats such comparisons as inherently misleading given how outcomes vary between individuals. Aesthetic clinics that lean heavily on influencer marketing and social posting frequently skip pre-clearance because campaigns move fast, but the consequence is a fine plus a retroactive takedown order covering the whole campaign at once.

Beyond before-and-after images, claims such as best, one hundred percent safe, or no side effects all fall squarely within the prohibited category of exaggerated advertising, even where the practitioner genuinely believes the procedure is safe, because the rule judges the wording's tendency to create unrealistic consumer expectations rather than the underlying clinical truth. We recommend clinics build a standard, pre-cleared library of approved wording to reuse rather than letting a marketing team draft fresh copy for every campaign with no screening layer.

Penalties for advertising breaches run from administrative fines to an immediate takedown order, and where the advertisement is found to have induced patients into higher-risk procedures, regulators can also route the matter into consumer-protection proceedings for deceptive practice, leaving the clinic facing two tracks of enforcement at once. We treat advertising review as a standing routine to run alongside licensing and accounting work, not a task taken up only once a complaint has already landed.

Controlled medicines and medical devices on the premises

Clinics using controlled-category anaesthetics, sedation agents, or products such as botulinum toxin and dermal fillers need a traceable log of every unit received and every unit administered, because the Food and Drug Administration cross-checks purchase volumes against the quantities recorded in patient charts. Unexplained gaps between the two routinely draw suspicion of off-book use or unlicensed resale.

Certain devices fall into categories requiring separate registration or import licensing, and clinics that import laser or skin-tightening equipment directly rather than through a properly registered distributor carry two layers of exposure at once — device-licensing risk and, if the tariff classification is wrong, customs risk. We therefore review medical-device certification documents alongside the facility licence, since the two issues look separate but their consequences are directly linked.

Disposal of expired medical supplies and infectious clinical waste sits under its own separate regime from ordinary refuse. Clinics without a contract with a licensed infectious-waste disposal operator, or without weight logs for each collection cycle, are routinely flagged during annual sanatorium inspections even where no patient complaint has ever been raised.

Patient records, informed consent, and personal-data rules

Patient records qualify as sensitive personal data under the personal-data protection regime precisely because they concern health directly, and collecting, using or disclosing them requires a firmer legal basis than ordinary data. Even where the use is purely for the patient's own treatment, the clinic still needs proportionate security controls over the record system — role-based access restrictions, for instance, rather than letting every staff member browse every patient's file.

The informed-consent form used before a procedure needs to genuinely convey the risks and alternatives, not stand as a boilerplate document signed on the way into the treatment room. In a clinical dispute, a consent form drafted too broadly or in language an ordinary patient could not follow is often read by a court or professional council as no real consent at all, putting the operator and practitioner on the back foot from the outset even where the procedure itself met professional standards.

Releasing records to a third party — an insurer, or the patient's own lawyer — needs a distinct authorisation separate from the treatment consent itself. A fair number of clinics send records to insurers on a phone request without a proper written release, a risk that sits quietly unnoticed until one patient eventually complains about an unauthorised disclosure.

Professional liability and handling patient complaints

When a patient files a complaint with the Medical Council, Dental Council, or another relevant professional body, the process typically opens with a request for a written explanation from the practitioner, and that first written response carries disproportionate weight in shaping everything that follows. A submission drafted without understanding the procedure, or one that concedes facts unnecessarily early, is hard to walk back later. We advise seeking guidance before that first explanation goes out, even where the underlying matter looks like a minor misunderstanding.

Separately from the professional-body track, a patient may also bring a civil damages claim against both the clinic and the practitioner at the same time, leaving the clinic managing two parallel processes judged by different standards — the professional track tests whether ethical or clinical standards were breached, while the civil track tests actual damage and causation. Clinics that carry professional-liability insurance arranged in advance tend to weather this period without a severe cash-flow hit.

Many complaints resolve before ever reaching a professional council, provided the clinic runs a responsive internal complaint channel backed by complete records supporting what actually happened. A large share of patients complain because they feel they were never given an adequate explanation rather than because they set out to pursue formal action from the start, so a clear internal channel for hearing concerns and explaining decisions cuts down considerably on matters that escalate to a council.

Foreign practitioners: professional licensing and work permits

A foreign doctor or dentist seeking to practise in Thailand must first have their qualifications recognised and sit for the Thai professional council's licensing examination — a separate step entirely from the work permit issued by the Department of Employment. Some clinics assume that once a work permit is secured, treating patients can begin, when in fact the Thai professional licence must always come first.

Even once the professional licence is in hand, the work permit itself is tied to a specific position and specific employer entry. If a foreign doctor moves to see patients at a sister branch of the same clinic group without the work permit being amended to cover that new location, the arrangement counts as working outside its stated conditions, which carries a fine against both employer and practitioner even where both branches sit under the same corporate group.

One point often overlooked is that the professional licence and the work permit renew on different cycles entirely. A clinic without a per-practitioner expiry tracking system risks a doctor continuing to see patients after one of the two licences has quietly lapsed unnoticed, which affects both the legal standing of the treatment given and coverage under a liability policy, since such policies typically require the insured to hold every relevant licence in full force throughout the period of service.

VAT treatment, and revenue recognition for course packages

Medical services aimed at treating disease or bodily abnormality are exempt from VAT under the Revenue Code, but purely cosmetic services unconnected to treating a condition — filler injections for appearance alone, or relaxation-focused spa treatments — fall outside that exemption and carry standard VAT. A frequent problem is that the same clinic delivers both categories side by side, yet its revenue records fail to separate exempt items from taxable ones cleanly, so when the Revenue Department audits, the clinic has to work back through individual patient charts to prove which procedure had a genuine medical indication.

Prepaid course packages, where a patient pays a lump sum upfront and draws it down over several visits, need their own accounting discipline, because the amount collected in advance is not fully earned revenue on the day of sale — it belongs in a deferred revenue account and is recognised progressively as each session is actually delivered. A clinic that books the whole package as revenue on the sale date overstates taxable income in the first year, and if a patient later fails to use the full course or asks for a refund, retroactively correcting the books is far messier than setting the system up correctly from the outset.

Another recurring risk is a package that bundles an exempt service and a taxable one under one combined price, which needs a reasonable, consistently applied allocation method rather than an ad hoc split chosen each period to minimise tax. We typically help clinics design a sub-ledger that separates revenue types right at the point of sale, alongside a package-pricing allocation policy that can be explained to an auditor or a revenue officer at any time.

Accounting controls a clinic needs in practice

Clinics run cash flows unlike most ordinary businesses, mixing counter cash receipts, card payments, and insurer settlements that lag by months. Reconciling all three against the underlying clinical record of what was actually delivered needs to happen routinely, since this is the point where revenue leaks most easily if the booking system, the patient record system, and the accounting system are never cross-checked against each other.

Purchasing of medicines and supplies should keep the ordering function, the receiving function, and the recording function in separate hands, since some products carry high per-unit value and real leakage risk. Segregating these duties reduces the chance any single person can quietly obscure the gap between purchase volumes and actual usage, which loops directly back into the controlled-medicine audits run by the Food and Drug Administration.

Finally, clinics with multiple branches or several practitioners working under one licence should keep revenue reporting broken down by individual practitioner rather than lumped into one branch-wide figure, because when a professional dispute or a tax audit arises, the ability to trace data straight back to the specific person and date of service cuts sharply into the time needed to respond to regulator questions.

When to act, and when waiting is fine

• When opening a new clinic or changing its service category

  Confirm the licence category you apply for covers every procedure you actually plan to offer before filing, rather than expanding scope later.

• When the marketing team is preparing a new campaign

  Route all wording and imagery through pre-clearance every time, especially before-and-after images and any efficacy claims.

• When bringing on a foreign practitioner or opening a new branch

  Verify the professional licence and work permit match the actual location and role before treatment begins.

• When starting to sell prepaid packages or treatment courses

  Set up the deferred-revenue system and price-allocation policy before the sale launches, not retroactively after the Revenue Department raises a question.