Thailand: Personal Data Protection Committee opened consultation on review of Personal Data Protection Act B.E. 2562 and its secondary legislation

On 20 December 2024, the Office of the Personal Data Protection Committee (PDPC) opened a consultation on the review of the Personal Data Protection Act B.E. 2562 and its secondary laws until 18 January 2025. The Personal Data Protection Act establishes protections for personal data, outlines the roles of data controllers and processors, and sets guidelines for data security, consent, and breach notifications. It also establishes the PDPC as the supervisory authority and details the rights of data subjects, liabilities, and penalties for non-compliance. The PDPC seeks input on the law's purpose, key measures, definitions, supervisory roles, rights and obligations, liabilities, penalties, subsidiary legislation, and expected benefits and challenges.