On 8 May 2021, the Royal Decree Prescribing an Entity and Business in which the Data Controller is Exempted from the Personal Data Protection Act B.E. 2562 (No. 2) B.E. 2564 was published in the Government Gazette. As a result, the previous one-year long postponement of the effective date of key operative provisions of the Personal Data Protection Act B.E. 2562 (2019) (“PDPA“) have been further postponed from 1 June 2021 to 1 June 2022.
The rationale for the further postponement is the severity of the COVID-19 pandemic and its significant impact on entities and businesses in both the private and public sectors across the country, which has delayed the PDPA readiness of many. When combined with the need to utilise advanced technology to implement the PDPA provisions, it was deemed reasonable to extend the period of enforcement of full implementation of the PDPA until 1 June 2022. This Update provides a brief overview of key provisions of the PDPA.
For more information, click here to read the full Legal Update.
