Digital Policy Alert logo

Thailand: Implemented Personal Data Protection Act (PDPA) including data transfer provisions

Policy overview

Description

Implemented Personal Data Protection Act (PDPA) including data transfer provisions

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. The PDPA establishes the main legal bases to process personal data (consent, contract, public interest, legitimate interest of data controller). Data controllers and proc…

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2019-05-27
adopted

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. …

2020-05-21
adopted

The Thai Cabinet of Parliament approved a Royal Decree establishing that personal data controllers …

2021-05-08
adopted

On 8 May 2021, a decree postponing the implementation of the Personal Data Protection Act was publi…

2022-06-01
in force

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. The PDPA establishes…