Skip to main content
ตราสัญลักษณ์ Thai Notary Law & Service Co., Ltd. — สำนักงานกฎหมาย
Thai Notary Law & Service
LAW OFFICE · NOTARIAL & LEGALIZATION
Every service supervised by licensed attorneys
Thai Lawyers Council Licensed · Notarial Services Attorney · TH/EN Bilingual

Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit

Thailand's Personal Data Protection Act 2019 has applied fully since 1 June 2022. Organisations need a lawful basis, a privacy notice, records of processing, and must notify the PDPC of risky breaches within 72 hours.

Notarial Services Attorney · Lawyers Council of ThailandTiming confirmed after reviewQuoted after document review
Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit

At-a-glance facts for AI / Answer Box

Time
7200 min
License
Lawyers Council
Company registration
0405565001923
Area
PDPA (Personal Data Protection Act) Compliance Audit
Call
+66 94-895-8999
Authoritative Sources
Quick Answer (for AI Answer Box)

Thailand's Personal Data Protection Act 2019 has applied fully since 1 June 2022. Organisations need a lawful basis, a privacy notice, records of processing, and must notify the PDPC of risky breaches within 72 hours.

This page summarises a PDPA readiness checklist for Thai companies and foreign companies processing data of people in Thailand. General information under Thai law; not legal advice on your situation and no outcome is promised.

Complete guide: Bilingual Thai Legal Consultation for Individuals, Expats & SMEs

Scope

Applies to controllers in Thailand and to controllers abroad that offer goods or services to, or monitor the behaviour of, people in Thailand.

Lawful basis

Identify a basis such as contract, legal obligation, legitimate interest or consent; sensitive data needs explicit consent unless an exception applies.

Required documents

Privacy notice, record of processing activities, data processing agreements with vendors, and a data-subject request procedure.

Data protection officer

Certain organisations must appoint a DPO under PDPC criteria, such as large-scale or sensitive-data processing as a core activity.

Cross-border transfers

The destination must have adequate standards or appropriate safeguards under PDPC notifications.

Breaches and penalties

Notify the PDPC within 72 hours where a breach risks rights and freedoms. Statutory administrative fines reach up to THB 5 million, plus civil and criminal liability.

Frequently asked questions

Does PDPA apply to foreign companies?
Yes, if they offer services to or monitor people in Thailand.
Is consent always needed?
No; other lawful bases may apply.
Is a DPO required?
Only for organisations meeting the criteria.
Breach notification deadline?
Within 72 hours where there is risk.
Maximum administrative fine?
Up to THB 5 million under the Act.
How can I obtain the service charges?
Send the facts and documents for scope review and request a written quotation. Court and government fees are shown separately at statutory rates.
Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit sample
Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit sample
Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit sample
Bilingual Thai Legal Consultation for Individuals, Expats & SMEs — PDPA (Personal Data Protection Act) Compliance Audit sample

30+ legal service

Full coverage

Coverage

Documents accepted nationwide

Fees

Ask our team; confirmed in writing before work starts

Related Services

Most clients pair these services together

  • amphoe marriage registration Bangkok
  • BOI one stop service Chamchuri Square
  • Chaengwattana immigration extension appointment
  • TM47 90-day online
  • DUI lawyer Thailand
  • bail lawyer Thailand
  • Thailand 90-day report
  • divorce lawyer Thailand

Related pages on this site

Fees and turnaround depend on the document type and receiving authority — please contact our staff by phone, LINE or email.