Data Privacy

Thailand PDPA in Its Second Phase: What Recent Developments Really Indicate

Thai Language version available here: https://fosrlaw.com/2026/pdpa-ของประเทศไทยในระยะที่/ Many organizations continue to approach Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA) as a first-generation compliance exercise. The emphasis remains on privacy notices, consent wording, template clauses, and remediation projects undertaken during the … Read More

PDPA ของประเทศไทยในระยะที่สอง: สิ่งที่พัฒนาการล่าสุดสะท้อนให้เห็นอย่างแท้จริง

พ.ร.บ. คุ้มครองข้อมูลส่วนบุคคลของไทยกำลังเข้าสู่ระยะที่สอง หน่วยงานกำกับดูแลไม่ได้มองเพียงว่าองค์กรมีนโยบายและเอกสารครบถ้วนหรือไม่ แต่คาดหวัง “ความรับผิดชอบที่พิสูจน์ได้จริง” ในทางปฏิบัติ บทความนี้วิเคราะห์พัฒนาการสำคัญ 5 ด้าน ได้แก่ สิทธิของเจ้าของข้อมูล การถ่ายโอนข้อมูลข้ามพรมแดน การคุ้มครองข้อมูลเด็ก การกำกับดูแล AI และมาตรฐานความรับผิดชอบองค์กร … Read More

Enforcing AI-Use Obligations in Professional Services Contracts

What Actually Works Under Thai Law and in Cross-Border Engagements AI Clauses Are No Longer About Permission In sophisticated professional services engagements, particularly legal services, AI-related provisions have evolved quietly yet decisively. They no longer ask whether AI may be … Read More

Thailand’s New Website Security Standards 2025: Implications for Compliance Under the Cybersecurity Act

Thailand has strengthened its national cybersecurity framework with the implementation of a Website Security Standard. The standard was officially released on September 16, 2025, and takes effect on the same day. Issued under the Cybersecurity Act B.E. 2562 (2019), this … Read More

Thailand’s PDPA: Enforcement in Action and Cross-Border Data Transfers

Thailand’s Personal Data Protection Act (PDPA), enforced since June 2022, demands robust compliance to avoid fines exceeding THB 21.5 million. The PDPC penalizes weak governance, inadequate security, and delayed breach responses. Key steps include appointing Data Protection Officers, implementing encryption, and ensuring 72-hour breach reporting. The PDPA’s cross-border data transfer rules, clarified in 2023, require Standard Contractual Clauses or Binding Corporate Rules for compliance. Adhering to PDPA not only mitigates penalties but boosts consumer trust by 15% and market access by 10%, offering strategic business advantages.
Read More

Australia’s Bunnings Ruling Sounds Alarm for Facial Recognition Use in Thailand

HOW AN AUSTRALIAN DATA PRIVACY CASE SIGNALS STRICT LIMITS ON FACIAL RECOGNITION TECHNOLOGY USE IN THAILAND. A landmark ruling against Australia’s hardware store “Bunnings” for the unlawful use of facial recognition technology (FRT) serves as a wake-up call for Thai … Read More

Artificial Intelligence, Machine Learning, and Big Data in Thailand: Legal and Regulatory Developments 2025

1. Introduction to AI in Thailand Thailand continues to develop as a regional leader in artificial intelligence (AI), machine learning (ML), and big data regulation, balancing innovation with legal protections. In 2025, the legal environment will be shaped by existing … Read More

AI Regulation in Thailand: What Foreign and Domestic Providers Should Know

Thailand is establishing a regulatory framework for artificial intelligence, adopting a rights-based and risk-focused approach that will soon influence both domestic and international AI service providers. Introduction Thailand is developing formal regulations for artificial intelligence (AI) through a novel legal … Read More

GDPR vs. Thailand PDPA: Substantive Legal Comparison June 2025

Explore a detailed comparison of GDPR vs. Thailand’s PDPA, highlighting key differences in enforcement, fines, data subject rights, and cross-border transfers. Understand compliance challenges and practical implications for businesses navigating Thailand’s evolving data protection landscape. … Read More

Medical Pharmacovigilance

Thailand: Medical Research, Pharmacovigilance, Data Management, And Data Privacy

The critical legislation on health and pharmaceuticals that relates to general privacy and data protection law in Thailand, including the Personal Data Protection Act 2019 (‘PDPA’), are as follows: … Read More