Educational Information Only
The content on this page is for general educational purposes and does not constitute legal advice. Every legal situation is unique. For matters involving investigation, arrest, litigation, or formal proceedings, consult a qualified legal professional.
Personal Data Protection Committee
คณะกรรมการคุ้มครองข้อมูลส่วนบุคคล
Enabling Act
Personal Data Protection Act B.E. 2562 (2019), fully effective 1 June 2022
Scope
Thailand's data-protection authority — supervises personal-data processing across public and private sectors, handles data-subject complaints, and enforces the PDPA against controllers and processors.
Key Powers
- • Investigate PDPA complaints from data subjects
- • Issue compliance orders and impose administrative fines (up to THB 5 million per violation, subject to factors)
- • Refer criminal violations (Section 79–83 PDPA) to public prosecutors
- • Recognise / approve cross-border transfer mechanisms (adequacy, BCRs, SCCs equivalents)
- • Publish guidance and sector-specific subordinate regulations
Enforcement Examples
- Periodic enforcement notices published on the PDPC site
- Public guidance on DPO (Data Protection Officer) appointment thresholds and cross-border transfer mechanisms
Publication Channel
Royal Gazette + PDPC notifications at pdpc.or.th
Contact Channel
+66 2 142 1033 · [email protected]
How Foreigners Interact
Foreigners processing Thai residents' personal data — including foreign-incorporated SaaS providers and e-commerce platforms — fall within the PDPA's extraterritorial scope and may be required to appoint a representative in Thailand; foreign data subjects in Thailand can file complaints with the PDPC.
Related Laws & Topics
Professional Legal Assistance
When a matter involves investigation, arrest, detention, litigation, or regulatory action, professional legal representation becomes essential.
Anglo Siam Legal provides experienced legal services across Thailand for both Thai nationals and foreigners.
feedback.wasThisHelpful