Thailand Issues Personal Data Protection Guidelines For AI Systems

Thailand’s Personal Data Protection Committee (PDPC) has issued its first comprehensive, technology-specific guidance on how the Personal Data Protection Act (PDPA) applies to artificial intelligence.

The PDPA Guidelines on Personal Data Protection in the Development and Use of Artificial Intelligence cover the full AI lifecycle—from planning and design, data preparation, and model training, through testing, deployment, and decommissioning—and apply to all types of AI, including analytic AI, generative AI, and agentic AI. While advisory rather than legally binding, the guidelines represent the PDPC’s authoritative interpretation of the PDPA’s application to AI and are expected to serve as a critical compliance reference for organizations developing or deploying AI in Thailand.