Is Thailand's PDPA like the GDPR?

Yes. The Thai PDPA is heavily modelled on the GDPR, with similar lawful bases, data subject rights, and a requirement for clear and withdrawable consent.

Asia-Pacifico

Consenso ai cookie in ประเทศไทย

Q: Can Thailand's PDPA lead to criminal penalties?

Yes. Beyond administrative fines up to 5 million baht, the Thai PDPA carries potential criminal penalties and civil damages, including punitive damages, which makes compliance especially important.

Consenso e privacy in ประเทศไทย

Thailand's PDPA, fully in force since June 2022, is heavily modelled on the GDPR and enforced by Thailand's Personal Data Protection Committee. It requires a lawful basis for processing and treats consent as one of several bases, but consent requests must be clearly separated from other terms and easy to withdraw. A notable feature is that the law carries not only administrative fines up to 5 million baht but also potential criminal penalties and civil damages, including punitive damages, which raises the stakes. Privacy notices in Thai are expected. Sensitive data requires explicit consent. Cookies that identify users are personal data and generally need consent for non-essential purposes.

Autorità

Personal Data Protection Committee (PDPC Thailand)

Stato

Personal Data Protection Act fully in force since June 2022

Legge principale

PDPA TH

Lingue

ไทย

Chi deve conformarsi

Data controllers and processors that collect, use or disclose personal data of individuals in Thailand, including those based abroad offering goods or services to people in Thailand.

Sanzioni

Administrative fines up to 5 million baht, plus possible criminal and civil liability

Obblighi principali

Obtain explicit prior consent for non-essential processing
Provide a clear privacy notice before collection
Honor access, rectification, erasure and objection rights
Appoint a data protection officer where required
Report data breaches to the office within the required timeframe

Indicazioni locali

Separate consent requests from other terms
Obtain explicit consent for sensitive data
Provide notices in Thai
Account for criminal and civil exposure, not just fines

Come ti aiuta ConsentX

Prior-script blocking for true opt-in
Geo-aware banner for Thai visitors
Separate consent capture for sensitive data
Rights request workflow with evidence
Region rule engine tuned for Thailand

Inizia gratis

yoursite.com

ประเทศไทย

Teniamo alla tua privacy

Ti chiediamo il consenso prima di qualsiasi cookie non essenziale, secondo le regole che si applicano nella tua regione.

Accetta tuttoRifiuta i non essenzialiGestisci preferenze

Consenso registrato

sha256 · chain ok

Questa pagina è stata tradotta automaticamente e può contenere errori. Fai verificare i dettagli legali a un legale locale qualificato prima di farvi affidamento.

Prepara ประเทศไทย con ConsentX

Banner per regione, blocco preventivo degli script, DSAR e prove a prova di manomissione.

Inizia gratis Prenota una demo

Come conformarsi a ประเทศไทย con ConsentX

1
Analizza il tuo sito
Esegui una scansione gratuita per trovare ogni cookie e tracker del tuo sito, così sai esattamente cosa richiede il consenso secondo ประเทศไทย.
2
Mostra un banner adattato alla regione
Aggiungi il banner ConsentX. Rileva la regione di ogni visitatore e mostra automaticamente l esperienza di consenso richiesta da ประเทศไทย.
3
Blocca i tracker fino al consenso
Mantieni bloccati i cookie e i tracker non essenziali finché la persona non acconsente, così nulla si attiva prima del consenso.
4
Registra prove a prova di manomissione
Ogni scelta viene conservata come ricevuta di consenso a prova di manomissione, da esibire in un audit ประเทศไทย.
5
Gestisci le richieste nei tempi previsti
Usa il flusso DSAR integrato con timer SLA per rispondere alle richieste di accesso, cancellazione e opposizione entro il termine di legge.