The Personal Data Protection Committee (PDPC) proposed drafts of two Notifications regarding ROPA under the Personal Data Protection Act B.E. 2562 (PDPA) for public hearings from 31st October 2024 to 14th November 2024. The PDPC may soon issue these Notifications and publish them in the Royal Gazette for 90 days before they come into force.... Read More

The Expert Committee (EC) of the Personal Data Protection Committee (PDPC) imposed a THB7,000,000 (around USD212,000) administrative fine on a data controller company on 31 July 2024.  It was the first ever fine for personal data breach in enforcement of the Personal Data Protection Act B.E. 2562 (A.D. 2019) (PDPA). The EC investigated the data... Read More

The Personal Data Protection Committee (PDPC) of Thailand has issued the PDPC Notification on Criteria for Deletion, Destruction or Anonymization of Personal Data B.E. 2567 (2024) dated 31st July 2024 (“Notification”).  The Notification was published in the Royal Gazette on 13th August 2024.  It will become effective on and from 11th November 2024.  We summarized... Read More

On 12th December 2023, the Personal Data Protection Committee (PDPC) issued the Notification on Criteria for Protecting Personal Data Sent or Transferred Abroad under Section 29 of the Personal Data Protection Act B.E. 2562.  This notification was published in the Royal Gazette on 25th December 2023 and it will become effective on and from 24th... Read More

On 12th December 2023, the Personal Data Protection Committee (PDPC) issued the Notification on Criteria for Protecting Personal Data Sent or Transferred Abroad under Section 28 of the Personal Data Protection Act B.E. 2562.  This notification was published in the Royal Gazette on 25th December 2023 and it will become effective on and from 24th... Read More