An overview of personal data protection law in Thailand

This newsletter provides an overview of Thailand’s Personal Data Protection Act B.E. 2562 (2019), which has been fully enforced since June 1, 2022. The Act establishes legal obligations for Data Controllers and Data Processors in relation to the collection, use, and disclosure of personal data, while safeguarding the rights of Data Subjects. The document outlines the types of personal data covered, procedures in the event of a data breach, consequences of non-compliance, and the applicable civil, criminal, and administrative penalties. It also offers practical guidance for businesses to ensure legal compliance and mitigate data protection risks.