Share on LinkedInShare on LinkedIn

ARTICLE · 22 AUGUST 2024

Landmark Fine Imposed Under Thailand's Personal Data Protection Act

Tilleke & Gibbins
Tilleke & Gibbins
Contributor
Tilleke & Gibbins

Tilleke & Gibbins

Tilleke & Gibbins has been present in Vietnam since 1992, when it became the first foreign law firm...

View firm profile
Explore more from Tilleke & Gibbins

The Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) has announced the first administrative fine under the Personal Data Protection Act B.E. 2562

ThailandPrivacy
Athistha (Nop) Chitranukroh
Athistha (Nop) Chitranukroh
Nopparat Lalitkomon
Nopparat Lalitkomon
Gvavalin Mahakunkitchareon
Gvavalin Mahakunkitchareon
Napassorn Lertussavavivat
Napassorn Lertussavavivat
Author LinkedIn connections

The Personal Data Protection Committee (PDPC) of Thailand's Ministry of Digital Economy and Society (MDES) has announced the first administrative fine under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). A major private company was fined THB 7 million for noncompliance with specific PDPA requirements, resulting in the unauthorized disclosure of personal data to a call center gang (phone scam fraudsters).

Key Findings of Noncompliance

The PDPC determined that there were three key violations of specific requirements of the PDPA:

  • Failure to appoint a data protection officer (DPO): Despite processing personal data for over 100,000 individuals as part of its core operations, the company did not appoint a DPO.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Forced-Labor Import Ban: How Should Businesses Respond?

Vietnam has introduced a new prohibition on importing goods produced through forced labor under Decree No. 292/2026/ND-CP, effective September 5, 2026. While the Ministry of Home Affairs has yet to publish implementing guidance, businesses face immediate legal exposure and must establish internal controls, supply-chain safeguards, and remediation procedures to manage forced-labor risks across their operations and commercial relationships.
VietnamInternational Law
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Advances National Policy Framework For Data Centers

On September 4, 2026, Thailand’s prime minister convened the first meeting of the Data Center Business Policy Committee. The committee endorsed a draft policy framework for the data center industry and tasked four subcommittees with developing the standards that would sit beneath it, shifting away from fragmented, agency-by-agency approvals toward a unified national strategy aiming to maximize economic value while managing environmental and infrastructure concerns.
ThailandMedia, Telecoms, IT, Entertainment
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Drug Registration Regulations To Reduce Administrative Burden

Vietnam's Ministry of Health has issued Circular No. 32/2026/TT-BYT, introducing significant reforms to the drug registration process that will take effect on October 1, 2026. The new regulations establish a five-year data exclusivity period for new drugs, simplify requirements for foreign legal documents, and introduce a re-examination pathway that could reduce administrative burdens for pharmaceutical companies.
VietnamFood, Drugs, Healthcare, Life Sciences
Tilleke & Gibbins
Tilleke & Gibbins