Description

Entry into force with grace period of Personal Data Protection Act (PDPA) including cybersecurity regulation

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. It mandates that data controllers implement security measures to prevent unauthorized or unlawful access, use, alteration, or disclosure of personal …

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2019-05-27
adopted

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. …

2021-05-08
adopted

On 8 May 2021, a decree postponing the implementaiton of the Personal Data Protection Act was publi…

2022-06-01
in force

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. It mandates that d…