Personal Data Protection Law of Thailand: Limitations to Collection, Use and Disclosure

The Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) requires the Controller to comply with the three limitations on collecting, using and disclosing personal data, which are (1) the purpose limitation under Section 21 of the PDPA; (2) the source limitation under Section 25 PDPA; and (3) the proportionality limitation under Section 22 of the… Read More

News, Publication, Article / 16 Jan 2020

Personal Data Protection Law of Thailand: Notice & Content

Under the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) notice and consent are two separate but related matters required for any collection, use or disclosure of personal data. Notice RequirementThe PDPA requires the Controller to notify each data subject of the purpose of any collection, use or disclosure of personal data prior to or… Read More

News, Publication, Article / 14 Jan 2020

Personal Data Protection Law Of Thailand: Introduction

Overview The Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand came into force in part on the 28th of May 2019. It establishes a legal framework which protects personal data of individuals and allows businesses to realize economic values from personal data. A one-year grace period up to the 28th May 2020 is… Read More

News, Publication, Article / 14 Jan 2020

DATA PROTECTION LAW OF THAILAND: NOTICE & CONSENT

Adherence to the notice and consent principles of the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) is vital to any PDPA compliance regime. Notice and consent are two separate matters but are inextricably linked pre-requisites of any collection, use or disclosure of personal data. NOTICE REQUIREMENT The PDPA requires that Controllers notify data subjects… Read More

News, Article / 28 Oct 2019

DATA PROTECTION LAW OF THAILAND: INTRODUCTION

OVERVIEW The Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand came into force on the 28th of May 2019.  It establishes a framework of principles, rules and bodies which protects an individual’s personal data whilst also enabling businesses to continue to derive economic value from the exploitation of personal data.  A one-year grace… Read More

News, Article / 28 Oct 2019

Innovation Driven by Trust: Thailand’s Personal Data Protection and Cyber Security Acts

As a country thought to be stuck in the “Middle Income Trap”, Thailand is innovating its way out. The kingdom is shifting away from a manufacturing based economy into one driven by innovation and technology through the Government’s ‘Thailand 4.0’ initiative. A cornerstone of Thailand 4.0 is the need to cultivate trust in consumers and… Read More

News, Article / 17 Jun 2019