Educational Information Only
The content on this page is for general educational purposes and does not constitute legal advice. Every legal situation is unique. For matters involving investigation, arrest, litigation, or formal proceedings, consult a qualified legal professional.
Penalties for Cybercrime in Thailand
Complete guide to penalties under Thailand's Computer Crime Act — hacking, online fraud, data breaches, and content offences.
Overview
Thailand's Computer Crime Act B.E. 2560 (2017) provides broad criminal penalties for various digital offences. Combined with the PDPA (2022), Thailand has a comprehensive framework for prosecuting cybercrime, data breaches, and online content offences. The Act has been controversially used to prosecute political speech and negative online reviews.
Penalties Table
| Offence | Statute | Fine Range | Prison Range | Foreigner Note |
|---|---|---|---|---|
| Unauthorized computer access (hacking) | Computer Crime Act B.E. 2560 (2017), Section 5 | Up to THB 100,000 | Up to 2 years | — |
| Unauthorized data interception | Computer Crime Act B.E. 2560 (2017), Section 8 | Up to THB 200,000 | Up to 3 years | — |
| Importing false data into computer system | Computer Crime Act B.E. 2560 (2017), Section 14(1) | Up to THB 100,000 | Up to 5 years | Includes fake news and misinformation |
| Content causing panic (fake news) | Computer Crime Act B.E. 2560 (2017), Section 14(2) | Up to THB 100,000 | Up to 5 years | Sharing unverified information can trigger this |
| Distributing obscene content | Computer Crime Act B.E. 2560 (2017), Section 14(4) | Up to THB 200,000 | Up to 5 years | — |
| Service provider failure to cooperate with authorities | Computer Crime Act B.E. 2560 (2017), Section 27 | Up to THB 200,000 | Up to 1 year | — |
| PDPA violation (data breach) | PDPA B.E. 2562 (2019), Section 90 | Up to THB 5,000,000 | Up to 1 year | Applies to businesses handling personal data |
Important Notes
The Computer Crime Act has been used to prosecute political speech and criticism of businesses.
VPN usage is legal but using a VPN to commit crimes carries the same penalties.
Data breaches must be reported to the PDPC within 72 hours under PDPA.
Forwarding or sharing content that violates the Act makes you equally liable.
Thai authorities can request data from foreign tech companies through mutual legal assistance treaties.
Penalties stack — a single online post could violate multiple sections simultaneously.
Disclaimer: This information is for educational purposes only and does not constitute legal advice. Penalties shown are statutory provisions and actual sentences may vary based on case circumstances and judicial discretion. Always consult a qualified Thai lawyer for specific legal advice.
Need professional legal assistance?
When a matter involves investigation, arrest, detention, litigation, or regulatory action, professional legal representation becomes essential.
Speak to Anglo Siam Legalfeedback.wasThisHelpful