Thailand’s Draft Data Protection Bill: Many Strengths, Too Many Uncertainties

Thailand is the most economically significant country in East Asia which does not yet have anything resembling a general data privacy law, but on 22 May 2018, just before the EU’s GDPR came into force, a draft Personal Data Protection Bill (PDPB) was approved by the Thai Cabinet for submission to the Council of State and the National Legislative Assembly. This article critically reviews the PDPB, by reference to the standards of international privacy instruments. It concludes that Thailand’s Bill is one of reasonable strength by current global standards, except for its major deficiencies in the independence of its DPA, and the excessive degree of potential exceptions to its operation.  https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3227862