On 25 December 2023, Thailand’s Personal Data Protection Committee (PDPC) published two subordinate regulations regarding cross-border transfer of personal data under the Personal Data Protection Act B.E. 2562 (2019) (PDPA) in the Government Gazette. These two rules are (1) Whitelist Notification; and (2) the Binding Corporate Rules (BCRs) and Appropriate Safeguards Notification, both of which will come into force on 24 March 2024.
Businesses may need to revisit which cross-border transfer option is appropriate for their specific circumstances, particularly considering whether their existing BCRs (for the Office of the PDPC’s approval) or appropriate safeguards (e.g., existing contractual clauses) are in compliance with the requirements set out by these new subordinate rules.

On 27 October 2023, Thailand’s Personal Data Protection Committee published for public consultation two new draft rules regarding cross-border transfer of personal data. These two draft rules, namely: (1) Draft Whitelist Notification and (2) Draft Binding Corporate Rules and Appropriate Safeguards Notification, upon becoming effective as binding laws, will serve to expand the available options for making a lawful transfer of personal data outside Thailand in compliance with the Personal Data Protection Act B.E. 2562.

Artificial Intelligence is a leading technology that is advancing rapidly. Many industries are anticipated to benefit from AI assistance, which may also affect human workforce in certain industries in the near future. Currently, two draft legislations have been introduced in Thailand: (i) The Draft Royal Decree on Business Operations that Use Artificial Intelligence System; and (ii) The Draft Act on the Promotion and Support of AI Innovations in Thailand.

Many of us have heard the term “Metaverse,” which is commonly used to refer to the combination of technologies that allows us to access a virtual reality world or bring virtual reality into the physical world, as first mentioned in Neal Stephenson’s scientific novel “Snow Crash” (1992). The term “Metaverse” has become one of the biggest buzzwords over the past year, and recently we have seen tech giants striking deals to take part in the metaverse.

Request a copy For over 40 years, the team at Baker McKenzie, Bangkok has assisted foreign individuals and international companies who are seeking investment opportunities in Thailand. Doing Business in Thailand is your personal guide to the key aspects of Thai law that significantly affect the way business is conducted…

The Personal Data Protection Act, B.E. 2562 (2019) (“PDPA”) has been published in the Government Gazette on 27 May 2019. 1. Timeframe With very few exceptions, companies and organizations collecting, using, disclosing, and/or transferring personal data will have preparation time for a period of one year to become fully compliant…