Law and the regulatory authority
Legislative framework
Summarise the legislative framework for the protection of personal information (PI). Does your jurisdiction have a dedicated data protection law? Is the data protection law in your jurisdiction based on any international instruments or laws of other jurisdictions on privacy or data protection?
Thailand has a dedicated data protection law; the Personal Data Protection Act BE 2562 (2019) (PDPA) was published on 27 May 2019 in the Royal Thai Government Gazette.
The PDPA aims to secure individual and personal data protection and impose obligations on businesses when collecting, using and disclosing personal data. However, based on the Royal Decree on Organisations and Businesses, under which personal data controllers are exempt from their obligations under Personal Data Protection Act Nos. 1 and 2 (the Royal Decree), the enforcement…
