Implemented Personal Data Protection Act (PDPA) including cybersecurity regulation
On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force.
It mandates that data controllers implement security measures to prevent unauthorized or unlawful access, use, alteration, or disclosure of personal data, with regular …
Scope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament
Complete timeline of this policy change
Hide details
2019-05-27
adopted
On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette.
…
2021-05-08
adopted
On 8 May 2021, a decree postponing the implementaiton of the Personal Data Protection Act was publi…
2022-06-01
in force
On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force.
It mandates that d…