Reference
·Supporting source
Thailand PDPA compliance maturity, BPO vendor universe (2024)
~70% fully compliant
Thailand's Personal Data Protection Act (PDPA), in full force since June 2022, requires roughly 70% of BPO vendors operating Thailand-resident data to demonstrate full compliance maturity by 2024 per PDPC (Personal Data Protection Committee) enforcement updates and Big Four (Deloitte, EY, KPMG, PwC) advisory benchmarks. The remaining 30% sit at partial maturity (documented policies but gaps in data-subject-rights operations, breach-notification workflows, or DPIA cadence). PDPA aligns with GDPR's lawful-basis and data-subject-rights framework; for global BPO operators serving EU or UK clients, PDPA compliance is a near-automatic spillover from existing GDPR posture. Captive GBS centres are 95%+ mature; third-party vendors lag.
Figure in context
Thailand's Personal Data Protection Act (PDPA), in full force since June 2022, requires roughly 70% of BPO vendors operating Thailand-resident data to demonstrate full compliance maturity by 2024 per PDPC (Personal Data Protection Committee) enforcement updates and Big Four (Deloitte, EY, KPMG, PwC) advisory benchmarks. The remaining 30% sit at partial maturity (documented policies but gaps in data-subject-rights operations, breach-notification workflows, or DPIA cadence). PDPA aligns with GDPR's lawful-basis and data-subject-rights framework; for global BPO operators serving EU or UK clients, PDPA compliance is a near-automatic spillover from existing GDPR posture. Captive GBS centres are 95%+ mature; third-party vendors lag.
Thailand's Personal Data Protection Act (PDPA), in full force since June 2022, requires roughly 70% of BPO vendors operating Thailand-resident data to demonstrate full compliance maturity by 2024 per PDPC (Personal Data Protection Committee) enforcement updates and Big Four (Deloitte, EY, KPMG, PwC) advisory benchmarks. The remaining 30% sit at partial maturity (documented policies but gaps in data-subject-rights operations, breach-notification workflows, or DPIA cadence). PDPA aligns with GDPR's lawful-basis and data-subject-rights framework; for global BPO operators serving EU or UK clients, PDPA compliance is a near-automatic spillover from existing GDPR posture. Captive GBS centres are 95%+ mature; third-party vendors lag.
Time scope
2024 PDPC, advisory benchmarks
Source basis
Supporting source
Interpretation notes
What this tells you
Thailand's Personal Data Protection Act (PDPA), in full force since June 2022, requires roughly 70% of BPO vendors operating Thailand-resident data to demonstrate full compliance maturity by 2024 per PDPC (Personal Data Protection Committee) enforcement updates and Big Four (Deloitte, EY, KPMG, PwC) advisory benchmarks. The remaining 30% sit at partial maturity (documented policies but gaps in data-subject-rights operations, breach-notification workflows, or DPIA cadence). PDPA aligns with GDPR's lawful-basis and data-subject-rights framework; for global BPO operators serving EU or UK clients, PDPA compliance is a near-automatic spillover from existing GDPR posture. Captive GBS centres are 95%+ mature; third-party vendors lag.
What not to do with it
Use the linked report for interpretation and keep basis differences explicit.
Related figures
Adjacent numbers that add context without drowning the value.
Thailand BPO, shared services sector revenue (2020-2024)
Concentrix, BOI IBC registry, DBD
BPO fully-loaded cost per seat, Thailand vs Manila vs Bengaluru (2024)
Everest Group BPO Pricing-CAGR Index, IDC ASEAN BPO Benchmark, Frost & Sullivan APAC BPO
EF EPI English Proficiency Index, Thailand global rank
Education First, EF EPI Thailand factsheet
Thailand captive GBS share by anchor MNC (2024)
Microsoft, BOI IBC registry, FTI digital cluster
BOI IBC project approvals (2020-2024)
Thailand Board of Investment, Revenue Department, BOI IBC announcement filings
BPO annual attrition, Thailand vs Philippines (2024)
Everest Group BPO Talent Pulse, IDC ASEAN BPO Workforce, Industry HR benchmarks
Report context
Atlas actors in this figure's reports
Profiles covered in the report that cite this number.