An overview of personal data protection law in Thailand

This newsletter provides an overview of Thailand’s Personal Data Protection Act B.E. 2562 (2019), which has been fully enforced since June 1, 2022. The Act establishes legal obligations for Data Controllers and Data Processors in relation to the collection, use, and disclosure of personal data, while safeguarding the rights of Data Subjects. The document outlines the types of personal data covered, procedures in the event of a data breach, consequences of non-compliance, and the applicable civil, criminal, and administrative penalties. It also offers practical guidance for businesses to ensure legal compliance and mitigate data protection risks.
Download publications

Describe

Key Takeaways:

  • Personal data under the protection of the Personal Data Protection Act
  • Key Steps in the Event of a Personal Data Security Measures Breach
  • Key Steps in the Event of Non-compliance by Data Controller and Data Processor
  • Doxxing as a Criminal Offense
  • Penalties under the Personal Data Protection Act