Thailand: Data Localisation Requirements in NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023)

Progress

Current status
in force
10 Sep 2026 in force
03 Sep 2024 adopted

Scope

Implementers
Thailand
Policy Area
Data governance
Policy Instrument
Data localisation requirement
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

10 Sep 2026
in force

Implemented NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including data localisation requirements

On 10 September 2026, the National Cyber Security Committee’s (NCSC) standards for the maintenance of cybersecurity in cloud computing systems B.E. 2566 (2023) enter into force. The standards mandate “high” impact information systems, which can have…

Source
Event type order
Action type implementation
Government branch executive
Government body data protection authority
03 Sep 2024
adopted

Adopted NCSC Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023) including data localisation requirements

On 3 September 2024, Thailand's National Cyber Security Committee (NCSC) adopted Standards for the Maintenance of Cybersecurity in Cloud Computing Systems B.E. 2566 (2023). The standards mandate “high” impact information systems, which can have “ver…

Source
Event type order
Action type adoption
Government branch executive
Government body data protection authority