We are pleased to release the latest Asian Legal Update, covering legal news and updates for the 3rd quarter of 2023 (as of the end of September 2023) for Indonesia, Malaysia, Philippines, Singapore...

On January 8, 2025, Thailand's Office of the Personal Data Protection Committee published two notifications in the Government Gazette—one for data controllers and the other for data processors...

On May 24, 2021, Notification Re: Security Standards for Personal Data (No. 2) was issued by Thailand's Ministry of Digital Economy and Society (MDES) to further extend the validity of the minimum...

It has been over one year since the Personal Data Protection Committee （the "PDPC"） published the first draft sub-regulation for the protection of cross-border personal data transfer for public review in October 2022.

The January–March 2023 issue of Asia Franchise & Business Opportunities magazine features an article by two franchising specialists in Tilleke & Gibbins' Bangkok office. Written by Alan Adcock, partner, and Sher Hann Chua, consultant, the article provides a summary of the legislative developments of 2022 most relevant to franchisors and franchisees.

On June 28, 2024, Thailand's Board of Investment (BOI) updated its list of promoted activities to include data hosting, which is listed as "Activity 8.2.4 Data Hosting Services."

Noppparat Lalitkomon, head of Tilleke & Gibbins' data protection team in Thailand, has prepared the Thailand contribution for the Data Privacy Trends and Topics Report, published by Lex Mundi.

Two notifications on the cross-border transfer of personal data, issued by Thailand's Personal Data Protection Committee (PDPC), came into effect on March 24, 2024.

On March 18, 2024, the president of the Supreme Court of Thailand announced the establishment of a specialized Technology Crime Division within the Criminal Court of Thailand.

When your company suffers a data breach, taking prudent, careful action can limit and perhaps even rectify some of the damage.

On 21st August 2024, the Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) announced that it had issued a fine of THB 7 million...

On May 5, 2021, the Thai Cabinet approved in principle a further one-year extension to the full enforcement date of the Personal Data Protection Act.

Thammapas Chanpanich, an associate at the firm's corporate and commercial group in Bangkok, was recently featured on the The JSIG Privacy Deep-Dive podcast...

Partner John P. Formichella, Senior Associate Naytiwut Jamallsawat and Associate Artima Brikshasri have co-authored a guide on "Comparing Privacy Laws: GDPR v. Thai Personal

Thailand's Personal Data Protection Act came into full effect on 1 June 2022 and various subordinate regulations have since been issued by the Personal Data Protection Committee.

Thailand has introduced new requirements for online social media platforms to verify the identity of paying advertisers before publishing their advertisements. On May 5, 2026, the Electronic Transactions Commission...

The Thai National Cybersecurity Committee (NCSC), as required by the Cybersecurity Act, reported to the cabinet in mid-August on trends and developments regarding cyber incidents in Thailand.

The Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) has announced the first administrative fine under the Personal Data Protection Act B.E. 2562

The PDPA will significantly impact businesses that handle personal data and it sets out heavy fines and penalties which will be imposed on organizations that mishandle the clients' personal data.

Thailand has completed the establishment of the Personal Data Protection Commission (PDPC), the regulator under the country's Personal Data Protection Act B.E. 2562 (PDPA)