Is Thailand's PDPA like the GDPR?

Yes. The Thai PDPA is heavily modelled on the GDPR, with similar lawful bases, data subject rights, and a requirement for clear and withdrawable consent.

Asía og Kyrrahafssvæðið

Samþykki fyrir vafrakökum í ประเทศไทย

Q: Can Thailand's PDPA lead to criminal penalties?

Yes. Beyond administrative fines up to 5 million baht, the Thai PDPA carries potential criminal penalties and civil damages, including punitive damages, which makes compliance especially important.

Samþykki og persónuvernd í ประเทศไทย

Thailand's PDPA, fully in force since June 2022, is heavily modelled on the GDPR and enforced by Thailand's Personal Data Protection Committee. It requires a lawful basis for processing and treats consent as one of several bases, but consent requests must be clearly separated from other terms and easy to withdraw. A notable feature is that the law carries not only administrative fines up to 5 million baht but also potential criminal penalties and civil damages, including punitive damages, which raises the stakes. Privacy notices in Thai are expected. Sensitive data requires explicit consent. Cookies that identify users are personal data and generally need consent for non-essential purposes.

Eftirlitsstofnun

Personal Data Protection Committee (PDPC Thailand)

Staða

Personal Data Protection Act fully in force since June 2022

Helstu lög

PDPA TH

Tungumál

ไทย

Hverjir þurfa að fara eftir þeim

Data controllers and processors that collect, use or disclose personal data of individuals in Thailand, including those based abroad offering goods or services to people in Thailand.

Viðurlög

Administrative fines up to 5 million baht, plus possible criminal and civil liability

Helstu skyldur

Obtain explicit prior consent for non-essential processing
Provide a clear privacy notice before collection
Honor access, rectification, erasure and objection rights
Appoint a data protection officer where required
Report data breaches to the office within the required timeframe

Staðbundnar leiðbeiningar

Separate consent requests from other terms
Obtain explicit consent for sensitive data
Provide notices in Thai
Account for criminal and civil exposure, not just fines

Svona hjálpar ConsentX

Prior-script blocking for true opt-in
Geo-aware banner for Thai visitors
Separate consent capture for sensitive data
Rights request workflow with evidence
Region rule engine tuned for Thailand

Byrjaðu frítt

yoursite.com

ประเทศไทย

Við virðum friðhelgi þína

Við biðjum um samþykki þitt fyrir hverja ónauðsynlega vafraköku, samkvæmt þeim reglum sem gilda á þínu svæði.

Leyfa alltHafna ónauðsynlegumStjórna stillingum

Samþykki skráð

sha256 · chain ok

Þessi síða var vélþýdd og kann að innihalda villur. Láttu hæfan lögmann á staðnum yfirfara lagalegu atriðin áður en þú byggir á henni.

Undirbúðu ประเทศไทย með ConsentX

Svæðismiðaðir borðar, fyrirfram lokun á skriftum, DSAR og óbreytanlegar sannanir.

Byrjaðu frítt Bókaðu kynningu

Hvernig á að uppfylla ประเทศไทย með ConsentX

1
Skannaðu vefinn þinn
Keyrðu ókeypis skönnun til að finna hverja vafraköku og rakningarþjónustu á vefnum, svo þú vitir nákvæmlega hvað krefst samþykkis samkvæmt ประเทศไทย.
2
Birtu samþykkisborða eftir svæði
Bættu við ConsentX borðanum. Hann greinir svæði hvers gests og birtir sjálfkrafa þá samþykkisupplifun sem ประเทศไทย krefst.
3
Lokaðu á rakningu þar til samþykki liggur fyrir
Haltu ónauðsynlegum vafrakökum og rakningu lokaðri þar til gesturinn samþykkir, svo ekkert keyri fyrir samþykki.
4
Skráðu sönnun sem ekki er hægt að breyta
Hvert val er vistað sem óbreytanleg samþykkiskvittun sem þú getur lagt fram í úttekt samkvæmt ประเทศไทย.
5
Afgreiddu beiðnir á réttum tíma
Notaðu innbyggða DSAR ferlið með SLA teljurum til að svara beiðnum um aðgang, eyðingu og afþökkun innan lögbundins frests.