Noppparat Lalitkomon, head of Tilleke & Gibbins' data protection team in Thailand, has prepared the Thailand contribution for the Data Privacy Trends and Topics Report, published by Lex Mundi.

On October 1, 2024, the Thai cabinet acknowledged the recommendations proposed by the National Anti-Corruption Commission (NACC) to prevent corruption related to online gambling.

On March 18, 2024, the president of the Supreme Court of Thailand announced the establishment of a specialized Technology Crime Division within the Criminal Court of Thailand.

The Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) has announced the first administrative fine under the Personal Data Protection Act B.E. 2562

The Thai National Cybersecurity Committee (NCSC), as required by the Cybersecurity Act, reported to the cabinet in mid-August on trends and developments regarding cyber incidents in Thailand.

Thai authorities have escalated efforts to block unlawful cross-border digital asset business operators. On June 19, 2025, the Ministry of Digital Economy and Society...

With technological advancements, business operators are able to access more varieties of data than ever before, and are able to use that data to assess the terms on which loans are provided.

The Vietnamese government has demonstrated a strong commitment to building a digital government, digital economy, and digital society through its recently...

Thailand has expanded the circumstances under which state agencies may bypass competitive bidding procedures to address urgent security challenges.

Thailand published new rules on May 1, 2026, establishing clear procedures for how the Anti-Money Laundering Office (AMLO) handles digital assets seized during criminal and money laundering investigations.

Thailand's central bank has proposed sweeping changes to digital banking security rules that would phase out SMS-based authentication and mandate biometric verification for large transactions. The draft notification extends security requirements beyond mobile banking to internet channels and nonbank providers, responding to evolving fraud tactics targeting gaps in the current regulatory framework.

Thailand's Personal Data Protection Committee (PDPC) has made it clear that the era of warnings and gentle reminders is over. On 1 August 2025, the regulator announced eight administrative fines across...

Insurance companies are required to institute a written IT security policy, which must be reviewed at least once a year or upon implementing any significant changes.

Thailand's National Cyber Security Committee (NCSC) released three notifications under the Cybersecurity Act on January 18, 2024, setting cybersecurity-related requirements for key organizations and assets.

Currently, no specific restrictions, conditions, or other concerns regulate the use of Artificial Intelligence (AI) tools by financial institutions.

On July 21, 2025, Thailand's National Cyber Security Agency (NCSA) released a draft amendment to the Cybersecurity Act B.E. 2562 (2019) for public hearing, aiming to address the rapid evolution...

As many are already aware, following the change of government in Myanmar on February 1, 2021, a draft Cyber Security Law was proposed which attracted widespread criticism.

Thailand's Digital Government Development Agency (DGA) has released drafts of two pivotal documents to guide Thai government agencies in adopting cloud technology and classifying data for cloud usage.

Thailand’s Office of Insurance Commission (OIC) has opened a public hearing on proposed amendments to the OIC Notification on Criteria for Information Technology Risk Governance...

The public was surprised when the draft Personal Data Protection Act (PDPA) was published for the final round of hearings.