Progress

Current status
adopted
01 Jun 2022 in force
08 May 2021 adopted
27 May 2019 adopted

Scope

Implementers
Thailand
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Government Branch
legislature
executive
Government Body
parliament
central government
Implementation Level
national

Timeline of events

01 Jun 2022
in force

Implemented Personal Data Protection Act (PDPA) including cybersecurity regulation

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. It mandates that data controllers implement security measures to prevent unauthorized or unlawful access, use, alteration, or disclosure of personal data, with regular …

Source
Event type law
Action type implementation
Government branch legislature
Government body parliament
08 May 2021
adopted

Postponed PDPA to June 2022 including cybersecurity regulation

On 8 May 2021, a decree postponing the implementaiton of the Personal Data Protection Act was published in the Royal Gazette. On 5 May 2021, the Thai Cabinet had approved the decree postponing the enforcement date of the Personal Data Protection Act…

Source
Event type law
Action type postponement
Government branch executive
Government body central government
27 May 2019
adopted

Entry into force with grace period of Personal Data Protection Act (PDPA) including cybersecurity regulation

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. It mandates that data controllers implement security measures to prevent unauthorized or unlawful access, use, alteration, or disclosure of personal …

Source
Event type law
Action type adoption
Government branch legislature
Government body parliament