Fix Thailand's data confusionThe Personal Data Protection Act is Thailand's first law governing data protection. Thailand has made significant strides in building a data governance framework, most notably through the Personal Data Protection Act (PDPA) 2019. Thailand's constitution guarantees the right to access public information, and the Official Information Act famously declares that "disclosure is the rule, secrecy the exception." Although the PDPA requires data controllers to notify the Personal Data Protection Committee and affected individuals within 72 hours of a breach, public disclosure has often been minimal. Open, accessible public data is not a threat to governance.

Source: Bangkok Post February 19, 2026 18:35 UTC