Thailand: Data Protection

On July 31, 2026, Thailand’s Big Data Institute (BDI) launched a public consultation on the principles of a proposed new data-sharing law, with comments accepted until August 31, 2026. If enacted, the law would establish Thailand’s first comprehensive framework for government and private-sector data sharing, creating a systematic, secure, and transparent regime to support analytics, policymaking, research, and innovation.

Thailand’s Office of the Personal Data Protection Committee (PDPC) recently released draft guidance on records of processing activities (ROPA) for personal data controllers and processors under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

On 6 July 2026, the Personal Data Protection Committee of Thailand (PDPC) issued a new Notification, setting out detailed requirements for handling requests by data subjects to access and obtain copies of their personal data, as well as requests for information on the source of personal data collected without consent.

Thailand has introduced new requirements for online social media platforms to verify the identity of paying advertisers before publishing their advertisements. On May 5, 2026, the Electronic Transactions Commission...

Thailand’s Personal Data Protection Committee (PDPC) has launched a public consultation period on a draft notification setting out criteria for data subject access requests (DSARs).

As part of its ongoing public consultation process for the development of new practical guidelines under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), Thailand's Personal Data Protection Committee (PDPC) held a two‑day public hearing on April 1–2, 2026.

On January 8, 2025, Thailand's Office of the Personal Data Protection Committee published two notifications in the Government Gazette—one for data controllers and the other for data processors...

On October 31, 2024, Thailand's Office of the Personal Data Protection Committee (PDPC) opened a public consultation period on its draft notification regarding exemptions...

On 13th August 2024, Thailand's Personal Data Protection Committee (PDPC) issued a Notification on the Deletion, Destruction, or De-Identification/Anonymization of Personal Data ("Notification") effective...