top of page
  • Writer's pictureAdmin


What You Should Know About Procedures for Personal Data Protection Complaints in Thailand


In July 2022, Thailand’s Personal Data Protection Committee (“DPDC”) has issued a regulation establishing procedures for filing and processing data subjects[1]’ complaints under Thai Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). The regulation is Complaint Filing, Rejection, Termination, Consideration, and the Period for the Consideration of the Complaint B.E. 2565 (2022) and has been effective since July 12, 2022.

泰國個人資料保護委員會 (“DPDC”) 於2022年7月發布一項法規,規定根據《佛歷2562年 (2019年)個人資料保護法》 (“PDPA”) 提交和處理數據主體申訴的程序。該規定是《佛歷2565年 (2022年) 提交、拒絕、終止、審查申訴和申訴的考慮期限》,自 2022年7月12日起生效。

Thai PDPA permits data subjects to file complaints against data controllers, data processors, or any person who fail to comply with PDPA. Below is requirements and procedures about this complaints:

泰國 PDPA 允許數據主體對數據控制者、數據處理者或任何不遵守 PDPA 的人提出申訴。以下是有關申訴的要求和程序:

File a Complaint


A complaint is submitted to “Expert Committee” directly to the PDPC office. It can be submitted by registered mail or electronically, as announced by the PDPC. In addition, the use language must be clear, plain, polite, appropriate, and no wording that would be considered extortion or intimidation either directly or indirectly. There is no fixed complaint form, however, a complaint must include at least following information:


Ø Name, address, phone number or e-mail of the complainant (or an authorized representative) along with ID card, passport, or other official identification documents. If the complaint is submitted by a representative, copy of Power of Attorney and identification document of the representative are required;


Ø Facts and detail about the violation of the PDPA;


Ø Detail of the damages or effects;


Ø Supporting evidence;


Ø Things that the data subject requests to do.


Please be noted that the complaint letter should include a sentence certifying that the information in the letter is true.


Complaint Consideration


Once the complaint is filed, the complainant will receive a receipt confirming the department received the complaint stating the date of receiving the complaint with a reference code. The official will then conduct a preliminary examination within 15 days before proposing the case to the Expert Committee for consideration. The committee will consider a few points below:


Ø whether the action specified in the complaint violate the PDPA;


Ø whether there are grounds for filing such complaint and whether it is reasonable;


Ø whether the Expert Committee has the authority to consider the complaint and whether the duties and powers of consideration are in accordance with other laws or belong to other agencies or not.


Generally speaking, the Expert Committee will complete the review within 90 days of the first meeting. The period may be extended twice for up to 60 days each time, if being approved by the PDPC.

一般而言,專家委員會會在第一次會議後90天內完成審查。如果得到PDPC 的批准,此期限可以延長兩次,每次最多60天。



There will be one of the following results after the consideration from the Expert Committee:


Ø Dismiss, if the Expert Committee considers there is no ground under the PDPA;


Ø Reject, if the evidence is incomplete;


Ø Set a conciliation session, if the complaint can be settled by conciliation procedure;


Ø Render the punishment as an administrative fine.


[1] Data subject is a person who owns his/her personal data and is the one who give away his/her necessary personal data to a service provider (data controller) to have them perform according to what both parties agreed under the contract. However, a data subject does not include a juristic person and deceased person.

40 views0 comments

Recent Posts

See All

Guideline of E-Signature in Thailand 泰國電子簽名的使用說明

與家庭和繼承有關的交易 (佛曆2549年規定不受電子交易法適用的民事和商業交易的皇家法令) 對於電子簽名和電子文件來說是不合法的。此外,需要在某些政府機構註冊的交易一般不能透過電子簽名完成。例如,泰國民商法要求出售或抵押不動產 (例如土地、建築物) 必須在土地局登記。


bottom of page