Data Protection Committee, Ministry of Digital Economy and Society
Liabilities under the PDPA
Fine up to THB 5 million
Imprisonment up to 1 year
Compensation for actual damages plus punitive damages up to twice the amount of the actual damages
Directors and other responsible persons could also be liable if the offender is a juristic person
Enforced with effect from
1 June 2022
Who will have to comply?
All organizations established in Thailand
Organizations outside of Thailand which collect, use, disclose and/ or transfer personal data of individuals in Thailand.
What type of data is protected?
Personal data - any data that could, directly or indirectly, identify an alive person, including customers, employees, suppliers, business partners, etc.
Sensitive personal data - Sensitive personal data - e.g. racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal records, health data, genetics/biological data, etc.