A Q&A guide answering common questions and concerns
of the Data Privacy landscape in various Southeast Asian
regions
To download the Data Privacy Q&A guide, please
click here.
To see other released Data Privacy Q&A guides on
separate jurisdictions, please click here.
Is there a data privacy law in the jurisdiction of
Thailand? If yes, is it implemented? If no, what laws are relied
on?
Yes, Thailand has the Personal Data Protection Act (PDPA). The
PDPA is the very first consolidated law governing data protection.
Before the PDPA, there is the Official Information Act, but it
specifically governs data protection under possession or control of
state agencies so it is not as encompassing. The PDPA was published
in the Royal Gazette on 27 May 2019 and became effective on the
next day. However, most of the provisions have not been implemented
because the government has issued the Royal Decree to exempt most
types of businesses, including most state and private
