Overview
Enacted in 2019, Thailand's Personal Data Protection Act B.E. 2562 provides a framework for the protection of personal data rights. Modeled in part on the GDPR, it lays down principles for lawful processing, requiring consent for data collection and implementing safeguards against unauthorized access or disclosure. The law aligns with Section 26 of the Constitution of the Kingdom of Thailand and grants individuals the right to remedies for violations of their data rights. Businesses operating in Thailand are obligated to ensure compliance, including appointing data protection officers where necessary and adhering to conditions for cross-border data transfers.