Thailand: Personal Data Protection Committee closed consultation on review of Personal Data Protection Act B.E. 2562 and its secondary legislation

On 18 January 2025, the Office of the Personal Data Protection Committee (PDPC) concluded its consultation on the review of the Personal Data Protection Act B.E. 2562 and its secondary laws. The Personal Data Protection Act establishes protections for personal data, outlines the roles of data controllers and processors, and sets guidelines for data security, consent, and breach notifications. It also establishes the PDPC as the supervisory authority and details the rights of data subjects, liabilities, and penalties for non-compliance. The PDPC gathered information on the law's purpose, key measures, definitions, supervisory roles, rights and obligations, liabilities, penalties, subsidiary legislation, and expected benefits and challenges.