(Unofficial Translation)
No. 136 Chapter 69 Gor

Government Gazette

27 May 2019

[Official Emblem of Royal Command]
Personal Data Protection Act,
B.E. 2562 (2019)
---------His Majesty King Phra Poramenthra Ramathibodi Sisin Maha Vajiralongkorn
Phra Vajira Klao Chao Yu Hua
Given on the 24th Day of May B.E. 2562;
Being the 4th Year of the Present Reign.
His Majesty King Phra Poramenthra Ramathibodi Sisin Maha Vajiralongkorn Phra
Vajira Klao Chao Yu Hua is graciously pleased to proclaim that:
Whereas it is expedient to have an enabling act on the law concerning personal data
protection.
This Act contains certain provisions in relation to the restriction of rights and freedom
of a person, which section 26, in conjunction with section 32, section 33 and section 37
of the Constitution of the Kingdom of Thailand so permit by virtue of the law.
The rationale and necessity to restrict the rights and freedom of a person in accordance
with this Act are to efficiently protect personal data and put in place effective remedial
measures for data subjects whose rights to the protection of personal data are violated. The
enactment of this Act is consistent with the criteria prescribed under section 26 of the
Constitution of the Kingdom of Thailand.
Be it, therefore, enacted by the King, by and with the advice and consent of the
National Legislative Assembly acting as the parliament, as follows:
Section 1

This Act is called the "Personal Data Protection Act, B.E.

2562 (2019)"
Section 2
This Act shall come into force on the day following the date
of its publication in the Government Gazette, except for the provisions of Chapter II, Chapter
III, Chapter V, Chapter VI, Chapter VII, and section 95, and section 96, which shall come
into effect after the lapse of a period of one year from the date of its publication in the
Government Gazette.
Section 3
In the event that there is any sector-specific law governing
the protection of Personal Data in any manner, any business or any entity, the provisions of
such law shall apply, except:

(1) for the provisions with respect to the collection, use, or disclosure of
Personal Data and the provisions with respect to the rights of data subjects including relevant
penalties, the provisions of this Act shall apply additionally, regardless of whether they are
repetitious with the above specific law;

1

Select target paragraph3