ARTICLE · 22 NOVEMBER 2022

Draft Of The PDPC Notification On International Transfers Of Personal Data

Nagashima & Ohno Tsunematsu

Explore more from Nagashima & Ohno Tsunematsu

In September 2022, the Personal Data Protection Committee ("PDPC") made publicly available the Draft Notification of the PDPC re: Determination of Rules and Principles of Appropriate Personal Data...

ThailandPrivacy

Shunsuke Minowa

Poonyisa Sornchangwat

Nuttida Doungwirote

1. Background

In September 2022, the Personal Data Protection Committee ("PDPC") made publicly available the Draft Notification of the PDPC re: Determination of Rules and Principles of Appropriate Personal Data Protection for International Transfers B.E. ... ("Draft Notification"), which had already passed the public hearing process.

The Draft Notification aims to clarify the requirements of the Binding Corporate Rules ("BCRs") and the appropriate safeguards, including standard contractual clauses ("SCCs"), which shall be provided by the data controller or the data processor before transferring the personal data to overseas countries under Section 29 of the Personal Data Protection Act of 2019 ("PDPA").

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Thailand Launches Public Consultation On Draft Data-Sharing Law

ThailandPrivacy

Tilleke & Gibbins

Thailand’s Draft Compliance Guidelines Position ROPA As Core Accountability Tool

ThailandPrivacy

Tilleke & Gibbins

More Clarity, More Compliance: Thailand's New Personal Data Access Rights Notification

ThailandPrivacy

Herbert Smith Freehills Kramer LLP

Thailand Proposes Significant Amendments To The Personal Data Protection Act

ThailandPrivacy

Tilleke & Gibbins

Thailand’s New Draft Guidance On Data Protection Officers

ThailandPrivacy

Tilleke & Gibbins

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Privacy
- Data Protection

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

Thailand's PDPC Signals Tougher Enforcement With Multi-Million Baht Fines

Thailand's Personal Data Protection Committee (PDPC) has made it clear that the era of warnings and gentle reminders is over. On 1 August 2025, the regulator announced eight administrative fines across...

ThailandPrivacy

Global Advertising Lawyers Alliance (GALA)

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.

ThailandPrivacy

Tilleke & Gibbins

Law Over Borders: Data Protection 2025 – Thailand

The Personal Data Protection Act B.E. 2562 (2019) (PDPA) was enacted in 2019 and became fully enforceable from June 1, 2022.

ThailandPrivacy

Tilleke & Gibbins

Thailand's Regulations For Cross-Border Personal Data Transfer Come Into Force

Two notifications on the cross-border transfer of personal data, issued by Thailand's Personal Data Protection Committee (PDPC), came into effect on March 24, 2024.

ThailandPrivacy

Tilleke & Gibbins

Thailand Issues New Rules On Data Subject Access Requests

On July 16, 2026, Thailand’s Personal Data Protection Committee (PDPC) published a notification in the Government Gazette establishing detailed rules governing data subjects’ right of access under section 30...

ThailandPrivacy

Tilleke & Gibbins

More Than A Warning: Eight Serious Fines Imposed In Thai Data Protection Cases

Thailand's Personal Data Protection Committee (PDPC) announced to the press on August 1, 2025, that it had issued eight new administrative fines under Thailand's Personal Data Protection Act...

ThailandPrivacy

Tilleke & Gibbins

AI Governance In Thailand: The PDPA Isn't Waiting. Neither Should You

Much of the discussion around artificial intelligence ("AI") regulation in Thailand focuses on future legislation. Less attention is paid to the obligations that already exist. For businesses deploying AI systems, Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") is already engaged and, in practice, any system involving personal data falls within its scope

ThailandPrivacy

Herbert Smith Freehills Kramer LLP

Thailand Issues Guidelines On PDPA Consent And Notification Requirements

Thailand's Personal Data Protection Committee (PDPC) has released separate guidelines for data controllers to follow in obtaining data subjects' consent and notifying data subjects of ...

ThailandPrivacy

Tilleke & Gibbins

Overview Of Thai PDPC's Notification And Guidelines On Data Breaches

The Notification on the Criteria and Procedures for Handling Personal Data Breaches (the "Notification") was issued by the Personal Data Protection Committee ("PDPC") of Thailand and enacted...

ThailandPrivacy

Global Advertising Lawyers Alliance (GALA)

The Thai Personal Data Protection Act (PDPA)

The Thailand Personal Data Protection Act (PDPA) is the latest piece of legislation which offers data protection regulations against the misuse of personal data that has been collected from individuals in Thailand.

ThailandPrivacy

Frank Legal & Tax