Educational Information Only — Not Legal Advice

    This site provides educational information only and is not a substitute for professional legal advice. Consult a qualified Thai lawyer for personalized guidance. Laws may change. Full DisclaimerPrivacy Policy

    Skip to main content
    Last updated:
    Share:

    Educational Information Only

    The content on this page is for general educational purposes and does not constitute legal advice. Every legal situation is unique. For matters involving investigation, arrest, litigation, or formal proceedings, consult a qualified legal professional.

    Data Protection / PDPA

    Data Protection / PDPA Overview: Introduction to Thai Law

    Comprehensive introduction to data protection / pdpa principles, historical development, and key legislation governing data protection / pdpa matters in Thailand.

    Last updated: February 2026

    Introduction to Data Protection / PDPA

    Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) came into full effect on June 1, 2022. Modeled after the EU's GDPR, the PDPA regulates the collection, use, disclosure, and transfer of personal data. It applies to any organization processing personal data of individuals in Thailand, regardless of where the organization is located. The PDPA established the Personal Data Protection Committee (PDPC) as the enforcement authority. Violations can result in administrative fines up to THB 5 million, criminal penalties including imprisonment, and civil damages.

    This comprehensive guide provides an overview of data protection / pdpa in Thailand, covering key principles, relevant legislation, and practical considerations for anyone navigating the Thai legal system.

    Key Principles

    Legal Framework

    Thai data protection / pdpa operates within a civil law tradition, with codified statutes forming the primary source of law. Judicial precedent plays a secondary role.

    Court Jurisdiction

    Data Protection / PDPA matters are heard in the Courts of First Instance, with appeals to the Court of Appeal and Supreme Court (Dika Court).

    Statutory Basis

    Primary legislation includes Personal Data Protection Act B.E. 2562 (2019) and PDPC Notifications and Guidelines, along with relevant royal decrees and ministerial regulations.

    Constitutional Protections

    The Thai Constitution guarantees fundamental rights that apply to all data protection / pdpaproceedings, including due process and equal protection.

    Key Legislation

    Personal Data Protection Act B.E. 2562 (2019)
    PDPC Notifications and Guidelines
    Ministerial Regulations on Data Protection
    Royal Decree on Cross-Border Data Transfer

    Scope & Application

    Data Protection / PDPA in Thailand applies to:

    • All persons within Thai territory (Thai and foreign nationals)
    • Conduct occurring within Thailand's borders
    • Certain extraterritorial conduct by Thai nationals
    • Matters falling within the subject matter jurisdiction of relevant courts

    More Data Protection / PDPA Topics

    When Legal Representation Matters

    If you need assistance with data protection / pdpa matters in Thailand, professional legal advice can help protect your interests.

    Anglo Siam Legal provides experienced legal services across Thailand for both Thai nationals and foreigners.

    feedback.wasThisHelpful