Personal Data Protection Act 2019
พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล. Breach notification within 72 hours, per PDPC notifications.
← All jurisdictions
Jurisdiction record
Thailand
ประเทศไทย
A Thai-language console is a de facto tender requirement, and the central bank now assesses a GenAI DLP as a third-party AI system in its own right.
Orientation only, not legal advice. Every fact carries its own review date.
Market-prerequisite record
No product licence prerequisite recordedNo product licence prerequisite identified. Thai-language interface and documentation are effectively mandatory for public-sector tenders.
Sourced facts
Instruments and current record
Personal Data Protection Act 2019 Cybersecurity Act 2019 Computer Crime Act BOT SorNorSor 21/2562 and BOT AI Risk Guidelines 2025
Separately labelled interpretation Bounded product mapping
This path describes content governance; it does not represent certified legal compliance.
Cybersecurity Act 2019
NCSA and the seven critical information infrastructure sectors, per the 2025 list.
Computer Crime Act
Traffic-data retention of at least 90 days, extendable to 2 years. This sets the Thai retention default in the product.
BOT SorNorSor 21/2562 and BOT AI Risk Guidelines 2025
A GenAI DLP sold to a Thai bank is assessed as a third-party AI system. The evaluation-kit documentation exists partly to support that assessment.
Product mapping
Detector-pack direction
Thai national ID — 13 digits with a mod-11 check digit. The pack also carries a Thai-specific template for the religion field on the national ID card, which is sensitive personal data under the PDPA.
This maps deterministic detector content; it is not a claim of complete legal compliance.
Run browser demonstrationInterpretation
Classification mapping
Government classification mapped through the configurable taxonomy, with Thai-language label reads.
Customers should confirm applied policy with qualified counsel and security owners.
Watch items
Not treated as current fact
- Cybersecurity Act amendment
- NCSA standards texts
Validate the mapping in evaluation
Confirm current primary sources, applicability, and product maturity before selecting test cases.