Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Thailand: Decree on exemption of data controllers duties enters into force

On January 14, 2024, the Royal Decree outlining exceptions to data controller obligations under the Personal Data Protection Act (PDPA) came into force, following its publication, on August 17, 2023, in the Official Gazette. In particular, the decree stipulates that data controllers are not bound to adhere to Chapters 2 and 3 of the PDPA when responding to personal data requests from specific government entities, including:

  • the National Anti-Corruption Commission;
  • the Revenue Department;
  • the Customs Department;
  • the Excise Department;
  • recognized local government organizations responsible for tax collection;
  • the Secretary of the Cabinet carrying out royal prerogatives; and
  • the state agencies acting under laws of public interest.

You can read the decree, only available in Thai, here.