You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 24, 2019

Thailand’s Personal Data Protection Act – Requirements for Employers

Subscribe to Updates
Taylor Vinters – International Employment Law Update

If an employer collects employees’ personal information, the employer must comply with the Personal Data Protection Act (PDPA).

Thailand’s PDPA, which was enacted earlier this year, contains significant new requirements for employers that collect employees’ (called “data subjects” in the PDPA) personal information. Most sections of the PDPA will become effective on May 27, 2020, so employers should be aware of their duties and liabilities.

Important PDPA requirements that relate to employers include the following:

  • Employees’ personal information can be collected only to the limited extent necessary for the employer’s lawful purpose.
  • Employers cannot collect employees’ personal information from any source apart from the employees themselves.
  • Employers must prevent employees’ personal information from being disclosed, lost, or altered.
  • Employers must delete employees’ personal information after a certain time period.
  • Employers must receive consent from employees to collect, use, or disclose the employees’ personal information.
  • Employers must inform a special government-run Personal Data Committee if an employees’ personal information is leaked.

Employers who violate the PDPA could face civil or criminal liability, as well as administrative fines, depending on the claim and breach.

Civil Liability

If an offender is found to be civilly liable (e.g. an employee sues the employer for damages arising from a breach of the PDPA), the court can order the offender to pay punitive damages capped at twice the actual damages.

Criminal Liability

The PDPA also contains criminal liability for certain offences. Penalties are set at a maximum of six months’ imprisonment, a fine of up to THB 1 million (approximately EUR 30,000), or both. If the offender is a corporate entity, and the offence is committed because of an order or act by a director, manager, or any associated persons responsible for the act, those individuals would face criminal liability and be subject to the above penalties. Moreover, a person who has a duty to order or perform any act but fails to carry out his or her duty, resulting in the company committing an offence, is also criminally liable and subject to the above penalties.

Administrative liability

Companies can also face administrative fines for violation of the PDPA, which range from THB 500,000 to THB 5 million (approximately EUR 15,000 to EUR 150,000).

Comment

If an employer collects, uses, or discloses employees’ personal information, then the employer should be aware of the PDPA’s requirements. Otherwise, the employer can face criminal, civil, or administrative penalties.

Related Professionals

Practices

Employment

Location

RELATED INSIGHTS​ 

July 7, 2025
On June 20, 2025, Cambodia’s Ministry of Economy and Finance issued Instruction No. 19116 to clarify when board members and company directors must receive salaries and pay payroll taxes. Board members and company directors who are not considered employees are subject to a withholding tax. This category consists of people who complete services for a nonresident individual and people who perform independent work for a company in Cambodia. Board members and company directors who are considered employees, including those appointed by a foreign head office to temporarily manage a company in Cambodia, must pay payroll taxes on any salary they receive, regardless of whether they are paid by a local or foreign branch of the company. The above obligations apply regardless of whether the person has a work permit. Board members and company directors are exempt from paying payroll tax if they: Are not present and not performing a regular management role at the company despite being registered on the company’s statutes or patent tax card; Participate only in board meetings and occasional shareholder meetings; and Do not receive a salary from a company in Cambodia. Overall, this instruction provides an important clarification regarding the tax obligations of board members and company directors. Companies should pay attention to the classification of their board members and directors and be mindful of the exemption.   This article was written with the assistance of Tilleke & Gibbins interns Amelia Gemma Erickson and Amrin Keat.
Read More
July 7, 2025
On June 27, 2025, Thailand issued the new Ministerial Regulation Prescribing the Criteria and Rates for Receiving Unemployment Benefits (No. 2) B.E. 2568 (2025), which amended a similarly named ministerial regulation by boosting the rate of social security benefits to alleviate hardships for employees who are terminated. The new ministerial regulation took effect the following day. Under this new ministerial regulation, eligible terminated employees are entitled to receive unemployment benefits under the Social Security Fund (SSF) for a maximum of 180 days per year, at the rate of 60% of the employee’s monthly wages at the time of termination, up from 50% previously. However, the maximum wage used as the basis for calculating the benefit remains capped at THB 15,000 per month. Therefore, the maximum unemployment benefit that an employee can receive from the SSF is now THB 9,000 (up from THB 7,500) per month for a period of up to six months. To qualify for the unemployment benefits from the SSF, employees must be registered with the Social Security Office and must have contributed to the SSF for at least six months within the 15 months prior to the start date of the relevant unemployment period. This new ministerial regulation was enacted to increase the amount of financial support provided to insured persons in the case of termination, as part of the government’s objective of alleviating economic hardship under current economic and social conditions in Thailand. For more details on unemployment benefits in Thailand, or on any aspect of employment law in the country, please contact Pimvimol (June) Vipamaneerut at [email protected], Dusita Khanijou at [email protected], Ketnut Pukahuta at [email protected], or Chomanut Arif at [email protected].
Read More
July 4, 2025
On July 1, 2025, new minimum daily wage rates for Bangkok and certain business types nationwide were published in the Government Gazette, taking effect on the same day. The daily minimum wage rate for Bangkok has been increased to THB 400 per day, while the minimum wage rates for other provinces remain unchanged from the rates that took effect on January 1, 2025. However, daily minimum wage rates have also been increased to THB 400 nationwide for type 2, type 3, and type 4 hotels under the Hotel Act and for entertainment establishments under the Entertainment Place Act. This THB 400 rate applies to all businesses that meet the criteria, even if the province’s general rate is lower. The new minimum wage rates supersede any lower wages agreed upon in existing employment contracts or conditions of employment that were in force before this announcement came into effect. As a result, these employees must be paid their wages at the newly prescribed rate for work performed from July 1, 2025, onward.
Read More
June 30, 2025
On March 4, 2025, Cambodia’s Ministry of Labor and Vocational Training (MLVT) issued Prakas No. 073/25 on Procedures for Resolving Individual Labor Disputes, replacing Prakas No. 318 on the same topic from 2001 and introducing significant changes to how individual labor disputes are filed, processed, and escalated. In addition, Prakas No. 073 outlines the roles and responsibilities of labor inspectors, the process for filing and handling complaints, and the steps for conciliation and further legal recourse, as described below. Filing a Complaint Any party to an individual labor dispute can file a complaint with the Labor Dispute Department of the MLVT or the Department of Labor at the capital or provincial level. Upon receiving a complaint, a labor inspector will review the case and may initiate either conciliation or a labor inspection. Invitation letters will be issued to the disputing parties to provide relevant information and documents. Conciliation Process Prakas No. 073 places strong emphasis on the conciliation process, introducing strict procedural rules and deadlines with clear consequences for noncompliance: If the claimant fails to provide required information within the specified deadline (or within three working days thereafter without reasonable excuse), the complaint is deemed void. If the respondent fails to attend the conciliation meeting within the deadline (or within three working days thereafter without reasonable excuse), the conciliation is considered unsuccessful, and the respondent is deemed guilty as claimed. Once all necessary information is gathered, a labor inspector will invite both parties to a joint conciliation meeting, which must be held within three weeks of the complaint being received. If the claimant fails to attend the meeting or sign the minutes without a reasonable excuse, the complaint is void. If the respondent fails to attend the meeting without a reasonable excuse, the conciliation is unsuccessful, and the respondent
Read More