A comparison of data protection laws: Thailand

Data is the oil of the information age. Despite the varied and complex socioeconomic and political landscapes, many Asian jurisdictions are taking giant strides in strengthening personal data safeguards

Thailand’s Personal Data Protection Act, 2019 (PDPA) was promulgated to protect natural persons from the unauthorised or unlawful collection, use or disclosure of their personal data. The law came into force on 27 May 2019, but its full enforcement has been postponed twice, most recently until 1 June 2022.

DATA AUTHORITY

The PDPA provides for the establishment of the Personal Data Protection Committee (PDPC) with duties including:

• Determining measures or procedures for the protection of personal data;
• Issuing notifications or regulations;
• Announcing criteria for data protection procedures and the protection of data transferred overseas; and
• Preparing a master plan to…