Thailand: Data protection provisions in Personal Data Protection Act (PDPA)

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. The PDPA establishes the main legal bases to process personal data (consent, contract, public interest, legitimate interest of data controller). The personal data control…

On 8 May 2021, a decree postponing the implementaiton of the Personal Data Protection Act was published in the Royal Gazette. On 5 May 2021, the Thai Cabinet had approved the decree postponing the enforcement date of the Personal Data Protection Act…

The Thai Cabinet of Parliament approved a Royal Decree establishing that personal data controllers are exempted from the application of the Personal Data Protection Act, until 31 May 2021.

The Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. The PDPA introduces the "Personal Data Protection Committee" as the main regulator for data protection, and is delegated to determine measures and sanctions concernin…