The Expert Committee (EC) of the Personal Data Protection Committee (PDPC) imposed a THB7,000,000 (around USD212,000) administrative fine on a data controller company on 31 July 2024.  It was the first ever fine for personal data breach in enforcement of the Personal Data Protection Act B.E. 2562 (A.D. 2019) (PDPA). The EC investigated the data... Read More

The Personal Data Protection Committee (PDPC) of Thailand has issued the PDPC Notification on Criteria for Deletion, Destruction or Anonymization of Personal Data B.E. 2567 (2024) dated 31st July 2024 (“Notification”).  The Notification was published in the Royal Gazette on 13th August 2024.  It will become effective on and from 11th November 2024.  We summarized... Read More

On 12th December 2023, the Personal Data Protection Committee (PDPC) issued the Notification on Criteria for Protecting Personal Data Sent or Transferred Abroad under Section 29 of the Personal Data Protection Act B.E. 2562.  This notification was published in the Royal Gazette on 25th December 2023 and it will become effective on and from 24th... Read More

On 12th December 2023, the Personal Data Protection Committee (PDPC) issued the Notification on Criteria for Protecting Personal Data Sent or Transferred Abroad under Section 28 of the Personal Data Protection Act B.E. 2562.  This notification was published in the Royal Gazette on 25th December 2023 and it will become effective on and from 24th... Read More

The Office of Consumer Protection Board (OCPB) tabled the second draft of the Defective Product Liabilities Act (DPLA) for the second public hearing / consultation from 27 November to 12 December 2023 after its first draft was approved by the Cabinet and reviewed by the Council of State in 2022.  The bill aims at providing... Read More