LAW
At present, Thailand does not have any general statutory law
governing data protection or privacy. However, the Constitution of
the Kingdom of Thailand does recognize the protection of privacy
rights. In addition, statutory laws in some specific areas (such as
telecommunications, banking and financial businesses
("Specific Businesses") as well as other
non-business related laws, such as certain provisions under Thai
Penal Code and the Child Protection Act B.E. 2543 (2003), do
provide a certain level of protection against any unauthorised
collection, processing, disclosure and transfer of personal
data.
Recently, the draft Personal Information Protection Act
("Draft"), which has been reviewed by
the Council of State, was given to the Committee for House of
Representative Coordination to review and analyse if there are any
practical issues on applying the law and how the Data Protection
Committee should be formed.