Thailand: Data Protection

On June 18, 2026, Thailand’s Office of the Personal Data Protection Committee (PDPC) published two notifications in the Government Gazette establishing Thailand’s first formal certification framework for personal data...

The surge in AI development has created unprecedented demand for training data, leading many organizations to turn to synthetic data as a solution.

Much of the discussion around artificial intelligence ("AI") regulation in Thailand focuses on future legislation. Less attention is paid to the obligations that already exist. For businesses deploying AI systems, Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") is already engaged and, in practice, any system involving personal data falls within its scope

Tilleke & Gibbins has updated the Cambodia, Myanmar, Thailand, and Vietnam chapters in Multilaw's Global Data Protection Guide, which collects expert advice from Multilaw member firms...

On September 29, 2025, Thailand's Office of the Personal Data Protection Committee (PDPC Office) published its Regulations on the Review and Certification of Binding Corporate Rules B.E. 2568 (2025) (the Regulations).

Thailand's Personal Data Protection Committee (PDPC) has made it clear that the era of warnings and gentle reminders is over. On 1 August 2025, the regulator announced eight administrative fines across...

The landscape of intellectual property (IP) has transformed alongside advancements in technology, transitioning from traditional methods to modern online approaches.

The rapid development and deployment of artificial intelligence in various industries is increasingly attracting the attention of regulators, who aim to encourage the progression of AI technologies while ensuring their responsible use.

Thailand's Personal Data Protection Act (PDPA) imposes RoPA requirements.