Thailand: Entry into force with grace period of Personal Data Protection Act (PDPA) including data transfer provisions

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. Data controllers and processors must keep records of their personal data processing activities, including key information such as the controller's details, processing purposes, collected data, access rights, retention periods, and security measures, and if a foreign entity, must designate a local representative in Thailand to perform these duties.