Educational Information Only — Not Legal Advice

    This site provides educational information only and is not a substitute for professional legal advice. Consult a qualified Thai lawyer for personalized guidance. Laws may change. Full DisclaimerPrivacy Policy

    Skip to main content
    Last updated:
    Share:

    Educational Information Only

    The content on this page is for general educational purposes and does not constitute legal advice. Every legal situation is unique. For matters involving investigation, arrest, litigation, or formal proceedings, consult a qualified legal professional.

    Back to Know Your Rights
    Digital Rights

    Your Data Privacy Rights (PDPA)

    Know your rights under Thailand's Personal Data Protection Act — consent, access, deletion, and complaint procedures.

    Updated:

    Your Rights

    Right to be informed about data collection

    Legal Basis: PDPA B.E. 2562 (2019), Section 23

    What To Do: Organizations must tell you what data they collect, why, and how long they keep it before or at the time of collection.

    Right to give or withdraw consent

    Legal Basis: PDPA B.E. 2562 (2019), Sections 19-20

    What To Do: You can withdraw consent at any time. Withdrawing consent must be as easy as giving it.

    Right to access your personal data

    Legal Basis: PDPA B.E. 2562 (2019), Section 30

    What To Do: Request a copy of all personal data an organization holds about you. They must respond within 30 days.

    Right to data portability

    Legal Basis: PDPA B.E. 2562 (2019), Section 31

    What To Do: Request your data in a commonly used, machine-readable format to transfer to another service.

    Right to object to data processing

    Legal Basis: PDPA B.E. 2562 (2019), Section 32

    What To Do: Object to processing based on legitimate interest or for direct marketing purposes.

    Right to erasure (right to be forgotten)

    Legal Basis: PDPA B.E. 2562 (2019), Section 33

    What To Do: Request deletion of your data when it's no longer necessary or consent has been withdrawn.

    Right to restrict processing

    Legal Basis: PDPA B.E. 2562 (2019), Section 34

    What To Do: Request that an organization stops processing your data while a dispute is being resolved.

    Right to file a complaint

    Legal Basis: PDPA B.E. 2562 (2019), Section 73

    What To Do: File a complaint with the Personal Data Protection Committee (PDPC) if your rights are violated.

    Common Myths vs Reality

    Myth: PDPA only applies to Thai companies

    Reality: PDPA applies to any organization processing data of individuals in Thailand, regardless of where the organization is based.

    Myth: Foreigners don't have PDPA rights

    Reality: PDPA protects all individuals in Thailand, including tourists, expats, and foreign workers.

    Myth: Companies can ignore deletion requests

    Reality: Organizations must respond to erasure requests within 30 days or face penalties up to THB 5 million.

    Emergency Contacts

    PDPC Complaint Hotline

    02-142-1033

    MDES (Ministry of Digital Economy)

    1212

    Disclaimer: This information is for educational purposes only and does not constitute legal advice. Laws and their interpretation may change. Always consult a qualified Thai lawyer for specific legal advice.

    Professional Legal Assistance

    When a matter involves investigation, arrest, detention, litigation, or regulatory action, professional legal representation becomes essential.

    Anglo Siam Legal provides experienced legal services across Thailand for both Thai nationals and foreigners.

    feedback.wasThisHelpful