Thailand PDPA
In force Thailand · In force Jun 1, 2022 · no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Thailand's GDPR-style data protection law: lawful bases including explicit consent for sensitive data, data subject rights, DPOs for large-scale or sensitive processing, breach notification to the PDPC within 72 hours, and cross-border transfer restrictions. Main obligations applied from 1 June 2022 after two postponements.
- Who it applies to
- Data controllers and processors in Thailand, and those outside Thailand offering goods or services to, or monitoring the behaviour of, data subjects in Thailand.
- Penalties
- Administrative fines up to THB 5 million per violation; criminal penalties up to 1 year imprisonment and/or THB 1 million for some offences; civil punitive damages up to twice actual damages.
- Enforced by
- Personal Data Protection Committee (PDPC) and its Office
- Official name
- Personal Data Protection Act B.E. 2562 (2019)
- Citation
- Government Gazette Vol. 136, Part 69 Kor, 27 May 2019
- Topics
- privacy, breach-notification, data-residency
Research notes
Dates and penalty figures come from established knowledge; the official ratchakitcha and PDPC sites blocked automated fetch, so re-verification was not possible this run. The 24 May 2019 enactment date is the date of royal endorsement (the gazette was published 27 May 2019). No 2025-2026 amendment was checked (search budget exhausted).
Related
Australia Cyber Security Act (ransomware reporting)Questions about Thailand PDPA
- What are the Thailand PDPA compliance deadlines?
- Jun 1, 2022: PDPA main obligations take effect.
- When does Thailand PDPA take effect?
- Thailand PDPA took effect on Jun 1, 2022.
- Who does Thailand PDPA apply to?
- Data controllers and processors in Thailand, and those outside Thailand offering goods or services to, or monitoring the behaviour of, data subjects in Thailand.
- What are the penalties under Thailand PDPA?
- Administrative fines up to THB 5 million per violation; criminal penalties up to 1 year imprisonment and/or THB 1 million for some offences; civil punitive damages up to twice actual damages.