Thai PBS Thai PBS
A user’s guide to Thailand’s controversial new data protection law

A user’s guide to Thailand’s controversial new data protection law

13 Sept 09:46 Key points summarised by AI
  • Thailand's Personal Data Protection Act (PDPA) of 2019, modeled after the EU's GDPR, officially takes effect on June 1, 2022, after being postponed twice since 2019.
  • The law requires explicit consent for collecting, processing, or disclosing personal data, applying to both domestic and international entities handling data of Thai individuals.
  • Violations of the PDPA carry significant civil, administrative, and criminal penalties, including fines up to 1 million baht and potential jail time, while granting data owners rights such as access, rectification, and erasure.
  • Despite multiple delays, a substantial number of Thai businesses, especially SMEs, remain unprepared for compliance, leading to concerns about legal challenges, executive liability, and potential impacts on foreign investment.
Read full article
Crime 1/1
Skip > Skip >