Is Thailand's PDPA like the GDPR?

Yes. The Thai PDPA is heavily modelled on the GDPR, with similar lawful bases, data subject rights, and a requirement for clear and withdrawable consent.

Asien og Stillehavsområdet

Cookiesamtykke i ประเทศไทย

Q: Can Thailand's PDPA lead to criminal penalties?

Yes. Beyond administrative fines up to 5 million baht, the Thai PDPA carries potential criminal penalties and civil damages, including punitive damages, which makes compliance especially important.

Samtykke og databeskyttelse i ประเทศไทย

Kort fortalt

Thailand's PDPA, fully in force since June 2022, is heavily modelled on the GDPR and enforced by Thailand's Personal Data Protection Committee. It requires a lawful basis for processing and treats consent as one of several bases, but consent requests must be clearly separated from other terms and easy to withdraw. A notable feature is that the law carries not only administrative fines up to 5 million baht but also potential criminal penalties and civil damages, including punitive damages, which raises the stakes. Privacy notices in Thai are expected. Sensitive data requires explicit consent. Cookies that identify users are personal data and generally need consent for non-essential purposes.

Tilsynsmyndighed

Personal Data Protection Committee (PDPC Thailand)

Status

Personal Data Protection Act fully in force since June 2022

Primær lov

PDPA TH

Sprog

ไทย

Hvem er omfattet

Data controllers and processors that collect, use or disclose personal data of individuals in Thailand, including those based abroad offering goods or services to people in Thailand.

Sanktioner

Administrative fines up to 5 million baht, plus possible criminal and civil liability

Vigtigste forpligtelser

Obtain explicit prior consent for non-essential processing
Provide a clear privacy notice before collection
Honor access, rectification, erasure and objection rights
Appoint a data protection officer where required
Report data breaches to the office within the required timeframe

Lokal vejledning

Separate consent requests from other terms
Obtain explicit consent for sensitive data
Provide notices in Thai
Account for criminal and civil exposure, not just fines

Sådan hjælper ConsentX

Prior-script blocking for true opt-in
Geo-aware banner for Thai visitors
Separate consent capture for sensitive data
Rights request workflow with evidence
Region rule engine tuned for Thailand

Kom gratis i gang

yoursite.com

ประเทศไทย

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Gør ประเทศไทย klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Sådan overholder du ประเทศไทย med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter ประเทศไทย.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som ประเทศไทย kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et ประเทศไทย-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.