Thailand has released a draft public guidance document aimed at helping citizens navigate the growing use of artificial intelligence tools safely and responsibly, as AI becomes more embedded in everyday digital life.

The proposed “AI Guide for Citizens” is intended for broad public use, offering accessible explanations of how AI systems work, including generative AI, along with their benefits and limitations. The document provides practical examples designed to help users of all ages and professions better understand when AI can be useful — and when caution is warranted.

Strong emphasis on data protection

A central theme of the draft is privacy and data security. Officials caution that publicly available AI platforms, particularly those operated by third-party providers, may pose risks if users input sensitive information.

The guide advises citizens not to enter personal identifiers, financial details, confidential business data, or government-related information into public AI systems, warning of potential legal and security consequences if such data is exposed.

Addressing Technical and Ethical Risks

The document also outlines known technical vulnerabilities associated with AI systems. It highlights issues such as “hallucinations,” where AI tools generate plausible but inaccurate information, as well as threats including prompt injection and data poisoning. Users are encouraged to verify outputs independently and treat AI as an assistive tool rather than a substitute for human judgment.

Beyond technical safeguards, the draft addresses ethical and legal responsibilities. It cautions against using AI to produce misinformation, deepfakes, or harmful content, underscoring that individuals remain accountable for material created with AI assistance. The guidance also notes that AI systems can reflect biases present in their training data, raising concerns about fairness and discrimination.

Reporting and redress mechanisms

The final section outlines steps citizens can take if they encounter AI-related scams or harmful digital content. Recommended actions include preserving evidence, reporting incidents to cybercrime authorities, and contacting Thailand’s data protection regulator in cases involving privacy violations.

According to the draft, the guidance consolidates existing Thai regulatory frameworks and aligns with international standards, including ISO AI governance standards and principles reflected in the European Union’s AI Act.