Cross-border data transfers allowed to jurisdictions with adequate protection or via standard contractual clauses. Active platform governance regulations.
Key national laws and regulations governing data privacy, cybersecurity, and tech operations in Thailand — with direct links to primary legal texts.
| Legislation & Statute | Official Text |
|---|---|
Personal Data Protection Act B.E. 2562 (PDPA 2019) Modeled heavily on the EU GDPR, establishing consent baselines, data subject rights, and destination adequacy assessments for cross-border data transfers outside Thailand. Legislative PowerStatutory Act | View Statute |
Cybersecurity Act B.E. 2562 (2019) Empowers the National Cyber Security Agency to inspect and demand data from public and private critical information infrastructure operators in situations deemed national emergencies. Legislative PowerStatutory Act | View Statute |
Copyright Act (No. 5) B.E. 2565 (2022) Introduced formal statutory notice-and-takedown safe harbors for online service providers and search engines, reducing intermediary liability exposure. Legislative PowerStatutory Act | View Statute |
| Legislation & Statute | Official Text |
|---|---|
Royal Decree on Digital Platform Services B.E. 2565 Requires intermediary platforms operating in Thailand to notify ETDA, designate local representatives, and institute clear terms of service and consumer dispute resolution mechanisms. Executive PowerGovernment Regulation | View Statute |
How Thailand's domestic laws align or conflict with 5 major digital trade agreements: ASEAN DEFA, RCEP, CPTPP, IPEF, and Bilateral DEAs & CEPAs.
Comparing international trade agreements against national laws and digital rights in Thailand. Select an agreement below to inspect chapter-level postures and court rulings.
Preserving ETDA platform audit powers and algorithm transparency under Royal Decree B.E. 2565.
Prohibits requiring transfer or disclosure of software source code or algorithmic weights.
Collides with Royal Decree on Digital Platform Services requiring ranking parameter disclosures.
Treaty non-disclosure restricts regulators and CSOs from auditing gig worker dispatch and dynamic fees.
Statutory notice-and-takedown safe harbors under Copyright Act Section 32/3.
Establishes intermediary liability protections and expeditious takedown processes.
Harmonized with Copyright Act (No. 5) B.E. 2565 Section 32/3 ISP exemptions.
Shields intermediaries from strict liability while requiring transparent due process counter-notices.
Preserving Patent Act compulsory licensing flexibilities for national public health security.
Encourages patent protection while respecting WTO TRIPS public health flexibilities.
Preserves Sections 46, 51, and 52 compulsory licensing under domestic public interest exceptions.
Guarantees state capacity to issue compulsory licenses for affordable generic medicines.
Adopting national risk-based AI ethics guidelines aligned with ASEAN regional baselines.
Establishes interoperable testing sandboxes and ethical AI safety baselines.
Harmonized with National AI Ethics Guideline and draft Royal Decree on AI Governance.
Voluntary testing benchmarks lack enforceable judicial redress for discriminatory automated scoring.
Preserving PDPA Section 28 adequacy assessments while integrating ASEAN Model Contractual Clauses.
Requires free cross-border data flows with non-discrimination standards.
Tension between PDPA B.E. 2562 Section 28 transfer adequacy rules and unconditional commercial transfers.
Retaining adequacy oversight protects citizen data from unvetted offshore processing environments.
Statutory risk levels are determined strictly by enacted domestic legislation, multilateral treaty commitments, and procedural safeguards rather than arbitrary numerical scores.
Digital trade agreements Thailand is negotiating or party to — tracking national positions, ratification progress, reservations, and negotiation timelines.
Active member state in 9-chapter DEFA negotiations. National delegation participating in SEOM text scrubbing ahead of planned November 2026 signing ceremony.
Provisional reservations filed on Chapter 2 (Data Flows); scrubbing ongoing
Department of Trade Negotiations, Ministry of Commerce (MOC) & Ministry of Digital Economy and Society (MDES)
US-led Indo-Pacific Economic Framework launched. ASEAN participants: Brunei, Indonesia, Malaysia, Philippines, Singapore, Thailand, Vietnam. Digital economy pillar included.
Formally ratified by national parliament
Ministry of Foreign Affairs & Ministry of Commerce (MOC)
IPEF partners reach substantial conclusion on digital economy pillar covering data flows, AI governance, and online consumer protections.
Formally ratified by national parliament
Ministry of Foreign Affairs & Ministry of Commerce (MOC)
Thailand formally initiates internal assessment and stakeholder consultations for potential CPTPP accession. Cabinet review ongoing.
Subject to ongoing multilateral negotiating rounds
Department of Trade Negotiations, Ministry of Commerce (MOC)
Recent regulatory developments, investigations, and reporting tagged to Thailand or regional ASEAN impact.
No dispatches or investigative reports currently tagged for Thailand.
