It has been over one year since the Personal Data Protection Committee （the "PDPC"） published the first draft sub-regulation for the protection of cross-border personal data transfer for public review in October 2022.

Noppparat Lalitkomon, head of Tilleke & Gibbins' data protection team in Thailand, has prepared the Thailand contribution for the Data Privacy Trends and Topics Report, published by Lex Mundi.

Partner John P. Formichella, Senior Associate Naytiwut Jamallsawat and Associate Artima Brikshasri have co-authored a guide on "Comparing Privacy Laws: GDPR v. Thai Personal

The Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) has announced the first administrative fine under the Personal Data Protection Act B.E. 2562

Data has been labeled the world's most valuable resource in our current digital economy. It is the lifeblood of many companies, especially those in the technology, media and telecommunications...

Under the new Personal Data Protection Act of Thailand ("PDPA"), sending an email newsletter to your customers, employees or business partners will now be subject to legal compliance requirements.

After Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) was passed into law, numerous provisions related to the collection, use, and disclosure of personal data...

Further to the Thai Cabinet's approval in principle of another one-year exemption from certain provisions under the Personal Data Protection Act (the PDPA)...

Thailand’s telecommunications regulator has introduced a range of new compliance obligations for telecom licensees aimed at preventing and suppressing technology crime.

Thailand's Personal Data Protection Committee (PDPC) has made it clear that the era of warnings and gentle reminders is over. On 1 August 2025, the regulator announced eight administrative fines across...

On August 17, 2023, the Thai government rolled out a royal decree that provides certain exemptions to data controllers' obligations under the Personal Data Protection Act B.E. 2562 (PDPA).

On 27 May 2019, the Personal Data Protection Act ("PDPA") was published in the Thai Government Gazette.

On 13th August 2024, Thailand's Personal Data Protection Committee (PDPC) issued a Notification on the Deletion, Destruction, or De-Identification/Anonymization of Personal Data ("Notification") effective...

The Legitimate Interest Rule, the Exception to the Rule, and the Exception to the Exception.

On July 16, 2026, Thailand’s Personal Data Protection Committee (PDPC) published a notification in the Government Gazette establishing detailed rules governing data subjects’ right of access under section 30...

Thailand's Personal Data Protection Committee (PDPC) has released separate guidelines for data controllers to follow in obtaining data subjects' consent and notifying data subjects of ...

Now halfway through 2025, Thailand continues to advance in the realm of data privacy, with the ambitious goal of achieving zero data breaches.

Thailand's Personal Data Protection Committee (PDPC) has launched a public consultation period to gather input for a forthcoming...

Thailand's Personal Data Protection Act (PDPA) enforcement has entered a new phase, and the insurance industry is squarely in the regulatory spotlight.

Generative artificial intelligence (GenAI) is no longer a distant innovation confined to science fiction and research labs; it has become an integral part of daily business operations worldwide.