Thailand’s Board of Investment (BOI) has confirmed that ByteDance, the parent company of TikTok, will inject US$25 billion into expanding its data infrastructure across the country—the largest single investment by a Chinese technology firm in Southeast Asia to date. The announcement, made in a joint statement with Thai officials, signals a major escalation in Beijing-backed digital expansion in a region where China’s tech giants have faced growing scrutiny over data sovereignty and regulatory oversight.
The investment will fund the construction of new data centers in Bangkok, Samut Prakan, and Chachoengsao provinces, with a focus on increasing server capacity and local data processing capabilities. According to the BOI, the initiative aims to address surging demand for digital services in Thailand, where TikTok remains one of the most downloaded apps, with over 35 million active users—nearly half the country’s population. The project aligns with Thailand’s broader push to position itself as a regional digital hub, though it also raises questions about the balance between economic incentives and potential risks to national data security.
ByteDance’s move comes as China’s tech sector continues its aggressive expansion in Southeast Asia, a strategy that has drawn both investment and regulatory pushback. In neighboring countries, Chinese firms have faced restrictions—Singapore imposed stricter data localization rules in 2023, while Indonesia has delayed approvals for certain Chinese-backed digital infrastructure projects over concerns about data control. Thailand, yet, has historically been more welcoming to foreign investment, including from state-linked enterprises, though recent amendments to its Personal Data Protection Act (PDPA) have introduced stricter compliance requirements for foreign companies handling Thai citizens’ data.
The BOI’s approval process for the investment was expedited under a special economic incentive package, which offers tax exemptions and accelerated permitting for high-value tech projects. A senior BOI official, speaking on condition of anonymity, noted that the project would create over 1,200 direct jobs in the short term and contribute to Thailand’s goal of increasing its digital economy to 20% of GDP by 2027. The official emphasized that the investment would prioritize local hiring and partnerships with Thai tech firms, though critics argue that such commitments often lag behind initial promises.
ByteDance’s decision to prioritize Thailand over other Southeast Asian markets—where it has existing data hubs in Singapore and Indonesia—reflects a calculated bet on the country’s stable political environment and relatively permissive regulatory stance. However, the investment also coincides with heightened tensions between the U.S. And China over tech competition, with Washington increasingly pressuring allies to restrict access to Chinese-controlled platforms. In February, the U.S. Commerce Department added ByteDance to its “Entity List” over national security concerns, though Thailand has not followed suit, maintaining its long-standing policy of non-alignment in great-power rivalries.
The BOI’s statement did not disclose whether ByteDance would be required to comply with Thailand’s PDPA’s stricter cross-border data transfer rules, which mandate that sensitive user data be stored locally. Industry analysts suggest that the company may seek exemptions under the BOI’s “high-tech promotion” scheme, which allows foreign firms to bypass certain data localization requirements if they can demonstrate compliance with international standards. A spokesperson for ByteDance in Thailand declined to comment on specific regulatory measures, stating only that the company was “committed to working with local authorities to ensure full alignment with Thai laws.”
Meanwhile, Thailand’s Digital Economy Promotion Agency (DEPA) has begun preliminary assessments of the project’s potential impact on cybersecurity and critical infrastructure. A DEPA official confirmed that the agency would conduct a risk evaluation but stopped short of predicting any immediate policy changes. The assessment process is expected to take up to six months, during which time ByteDance’s construction teams will initiate site preparations in Bangkok’s Eastern Economic Corridor (EEC), a designated zone for high-tech investments.
The investment’s scale and timing have sparked debates among Thai policymakers about the long-term implications of hosting such a large-scale foreign data operation. While the BOI frames the project as a boon for Thailand’s digital sovereignty, opposition parties and cybersecurity experts have raised concerns about potential vulnerabilities in the country’s data infrastructure. A report by Thailand’s National Cybersecurity Committee, leaked to local media, warned that increased reliance on foreign-controlled data centers could expose the country to espionage risks, particularly given Thailand’s status as a non-NATO ally with close military ties to both the U.S. And China.
ByteDance’s announcement follows a series of high-profile investments by Chinese tech firms in Thailand’s digital sector, including Alibaba’s 2023 acquisition of a majority stake in Thailand’s largest e-commerce platform and Huawei’s expansion of its 5G network infrastructure. The cumulative effect of these moves has led some observers to describe Thailand as a “testing ground” for China’s digital diplomacy in Southeast Asia. For now, however, the focus remains on the immediate economic benefits, with Thai officials emphasizing that the project will proceed without delays, barring unforeseen regulatory hurdles.
The next formal step in the process is a public hearing scheduled for June 15, where the BOI will present the project’s details to a parliamentary committee overseeing digital infrastructure. The hearing will include testimony from ByteDance representatives, though no decisions on additional compliance measures are expected until after the DEPA’s risk assessment is completed.
