Thailand Postpones the Personal Data Protection Act (PDPA) Enforcement to June 2022

Thailand Postpones the Personal Data Protection Act (PDPA) Enforcement to June 2022

On May 5th 2021, the Ministry of Digital Economy and Society (MDES) has announced that the Thai Cabinet had approved a postponement of the enforcement of Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA) to June 1, 2022.

Thailand’s PDPA was originally scheduled to come into effect on June 1, 2021. The PDPA is considered as the first local law designed to govern data protection in the digital age. It is comparable to the European General Data Protection Regulation (GDRP). Key aspects of the PDPA include: data processing, data collection, data storage, and data consent protocols.

The PDPA has created multiple challenges for both local businesses and foreign businesses so, together with the ongoing COVID-19 crisis, the PDPA has been postponed for one additional year.

As per today, there is not an official announcement in the Royal Thai Government Gazette yet.

Nevertheless, businesses are still required to comply with the Data Protection Standard as prescribed by MDES which includes regulations such as:
* Implementation of adequate data access and storage protocols.
* Assignment of user access management and responsibilities to prevent unauthorized access.
* Implementation of data logs including data deletion log, data transfer log, and data amendment log.