Personal Data Protection Act (Thailand)- PDPA

The Personal Data Protection Act (PDPA) B.E. 2562 (2019) is Thailand’s comprehensive data protection law governing the collection, use, disclosure, storage, and protection of personal data by organisations and public authorities. The PDPA establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates sensitive personal data processing, introduces consent and transparency requirements, and sets rules for data security and cross-border transfers. The law creates Thailand’s primary privacy framework and reflects international data protection principles similar to the EU GDPR.