Reference
·Primary source
PDPA Maximum Civil Fine Per Violation
THB 5M per violation
Thailand's Personal Data Protection Act (PDPA), which entered full enforcement on June 1 2022, imposes civil penalties of up to THB 5 million per data protection violation, with criminal penalties of up to THB 1 million and/or imprisonment for intentional or negligent breaches. The Office of the Personal Data Protection Committee (PDPC) has begun issuing formal investigations, particularly targeting healthcare providers, e-commerce platforms, and financial services firms. PDPA compliance has directly generated demand for data-classification software, consent-management platforms, and DPO-as-a-service offerings in Thailand's mid-market.
Figure in context
Thailand's Personal Data Protection Act (PDPA), which entered full enforcement on June 1 2022, imposes civil penalties of up to THB 5 million per data protection violation, with criminal penalties of up to THB 1 million and/or imprisonment for intentional or negligent breaches. The Office of the Personal Data Protection Committee (PDPC) has begun issuing formal investigations, particularly targeting healthcare providers, e-commerce platforms, and financial services firms. PDPA compliance has directly generated demand for data-classification software, consent-management platforms, and DPO-as-a-service offerings in Thailand's mid-market.
Thailand's Personal Data Protection Act (PDPA), which entered full enforcement on June 1 2022, imposes civil penalties of up to THB 5 million per data protection violation, with criminal penalties of up to THB 1 million and/or imprisonment for intentional or negligent breaches. The Office of the Personal Data Protection Committee (PDPC) has begun issuing formal investigations, particularly targeting healthcare providers, e-commerce platforms, and financial services firms. PDPA compliance has directly generated demand for data-classification software, consent-management platforms, and DPO-as-a-service offerings in Thailand's mid-market.
Time scope
2022–2024
Source basis
Primary source
Interpretation notes
What this tells you
Thailand's Personal Data Protection Act (PDPA), which entered full enforcement on June 1 2022, imposes civil penalties of up to THB 5 million per data protection violation, with criminal penalties of up to THB 1 million and/or imprisonment for intentional or negligent breaches. The Office of the Personal Data Protection Committee (PDPC) has begun issuing formal investigations, particularly targeting healthcare providers, e-commerce platforms, and financial services firms. PDPA compliance has directly generated demand for data-classification software, consent-management platforms, and DPO-as-a-service offerings in Thailand's mid-market.
What not to do with it
Use the linked report for interpretation and keep basis differences explicit.
Related figures
Adjacent numbers that add context without drowning the value.
Thailand Cybersecurity Market Size
NCSA Thailand, IDC ASEAN, Gartner Southeast Asia
NCSA Thailand Annual Operating Budget
NCSA Annual Report, MDES Budget Statement, Royal Gazette
Thai Banking Sector IT Security Spend Share
Bank of Thailand IT Risk Circular, SET bank filings, IDC
Thailand Reported Cyber Incidents (NCSA-tracked)
NCSA Annual Cybersecurity Report, PDPC breach notifications
Report context
Atlas actors in this figure's reports
Profiles covered in the report that cite this number.