Description

Implemented Personal Data Protection Act (PDPA) including cybersecurity regulation

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. It mandates that data controllers implement security measures to prevent unauthorized or unlawful access, use, alteration, or disclosure of personal data, with regular …

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2019-05-27
adopted

On 27 May 2019, the Personal Data Protection Act (PDPA) is published in the Thai Official Gazette. …

2021-05-08
adopted

On 8 May 2021, a decree postponing the implementaiton of the Personal Data Protection Act was publi…

2022-06-01
in force

On 1 June 2022, the Personal Data Protection Act (PDPA) will enter into force. It mandates that d…