Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 26 SEPTEMBER 2023

Thailand Releases Notification On Data Protection Officer Appointment

Tilleke & Gibbins
Tilleke & Gibbins
Contributor
Tilleke & Gibbins

Tilleke & Gibbins

Tilleke & Gibbins has been present in Vietnam since 1992, when it became the first foreign law firm...

View firm profile
Explore more from Tilleke & Gibbins

On September 14, 2023, Thailand's Personal Data Protection Committee (PDPC) published a notification on the requirements for the appointment of a data protection officer (DPO)...

ThailandPrivacy
Athistha (Nop) Chitranukroh
Athistha (Nop) Chitranukroh
Nopparat Lalitkomon
Nopparat Lalitkomon
Thammapas Chanpanich
Thammapas Chanpanich
Wilin Somya
Wilin Somya
Author LinkedIn connections

On September 14, 2023, Thailand's Personal Data Protection Committee (PDPC) published a notification on the requirements for the appointment of a data protection officer (DPO) in the Government Gazette, taking effect on December 13, 2023.

The notification on appointing a DPO lays out the criteria for what constitutes processing of personal data requiring "regular monitoring of the personal data or the system" by reason of "having large-scale personal data," which requires data controllers and data processors to appoint a DPO under the Personal Data Protection Act B.E. 2562 (PDPA).

Criteria

After a hearing on the draft DPO appointment notification in July, the published version has been slightly amended while the main criteria for appointment of a DPO are still the same. These have been finalized as follows:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Proposes Significant Amendments To The Personal Data Protection Act

Thailand's Personal Data Protection Act faces significant amendments that could reshape how government agencies and private organizations handle personal data. The proposed changes introduce new exemptions for anticorruption operations, clarify which entities qualify as government agencies, and fundamentally restructure the legal framework for data processing to align with international standards like the GDPR. These modifications would shift consent from a default requirement to one of seven equal lawful b
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Forced-Labor Import Ban: How Should Businesses Respond?

Vietnam has introduced a new prohibition on importing goods produced through forced labor under Decree No. 292/2026/ND-CP, effective September 5, 2026. While the Ministry of Home Affairs has yet to publish implementing guidance, businesses face immediate legal exposure and must establish internal controls, supply-chain safeguards, and remediation procedures to manage forced-labor risks across their operations and commercial relationships.
VietnamInternational Law
Tilleke & Gibbins
Tilleke & Gibbins
Article

Vietnam’s New Drug Registration Regulations To Reduce Administrative Burden

Vietnam's Ministry of Health has issued Circular No. 32/2026/TT-BYT, introducing significant reforms to the drug registration process that will take effect on October 1, 2026. The new regulations establish a five-year data exclusivity period for new drugs, simplify requirements for foreign legal documents, and introduce a re-examination pathway that could reduce administrative burdens for pharmaceutical companies.
VietnamFood, Drugs, Healthcare, Life Sciences
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Releases New Draft PDPA Guidance On Lawful Bases And Marketing

Thailand's data protection regulator has published draft guidance on lawful bases for processing personal data and marketing practices under the PDPA. The guidance introduces a five-step process for selecting lawful bases, emphasizes separating marketing consent from core services, and addresses AI-driven marketing transparency. Organizations processing personal data in Thailand face new expectations around accountability, consent management, and documentation of compliance efforts.
ThailandPrivacy
Tilleke & Gibbins
Tilleke & Gibbins
Article

Thailand Advances National Policy Framework For Data Centers

On September 4, 2026, Thailand’s prime minister convened the first meeting of the Data Center Business Policy Committee. The committee endorsed a draft policy framework for the data center industry and tasked four subcommittees with developing the standards that would sit beneath it, shifting away from fragmented, agency-by-agency approvals toward a unified national strategy aiming to maximize economic value while managing environmental and infrastructure concerns.
ThailandMedia, Telecoms, IT, Entertainment
Tilleke & Gibbins
Tilleke & Gibbins