Thailand's Personal Data Protection Act B.E. 2562 was enacted in 2019 and, after repeated postponements, became fully effective on 1 June 2022. Modeled closely on the EU GDPR, it sets out lawful bases for processing, data subject rights, and obligations for controllers and processors. The PDPC began issuing administrative fines from 2024.