The Parliament opened a public consultation on July 16, 2026, for the New Draft Personal Data Protection Act, according to official records.
Defining Government Agencies Under the Proposed Law
The New Draft PDPA introduces a formal definition of government agencies to remove compliance ambiguities present in the current Personal Data Protection Act B.E. 2562 (2019). According to the text published by the Parliament, the expanded scope captures central, provincial, and local administrations, alongside state enterprises, public organizations, the Parliament, courts, independent constitutional organizations, state attorney organs, and public higher education institutions.
Anti-Corruption Exemptions and Statutory Duties
State entities tasked with preventing and suppressing corruption and misconduct receive explicit exemptions under the new framework. According to the draft legislation, activities conducted by bodies such as the Office of the National Anti-Corruption Commission fall outside the reach of the PDPA when executing specific statutory mandates.
Restructuring Legal Bases for Data Processing
Lawmakers propose changes to Section 24 of the legislation by restructuring the legal basis framework for handling general personal data. Rather than treating consent as the default legal basis subject to narrow exceptions, the New Draft PDPA explicitly establishes consent as one of the lawful bases, according to the parliamentary proposal.
Expanding Public Interest Disclosures
According to the draft amendments, government agencies are legally empowered to disclose records when required by transparency mandates such as the Official Information Act B.E. 2540 (1997).
Did You Know? The public consultation period for the New Draft PDPA remains open through August 15, 2026, via the official parliamentary portal at www.parliament.go.th/section77.
Frequently Asked Questions
When does the public consultation for the New Draft PDPA close?
According to the Parliament, the public hearing closes on August 15, 2026.
Where can stakeholders submit comments on the draft legislation?
Stakeholders can participate in the consultation process through the official website at www.parliament.go.th/section77.
Which entities are newly defined under the draft law?
The draft covers central, provincial, and local administrations, state enterprises, public organizations, the Parliament, courts, constitutional independent organizations, state attorney organs, and public higher education institutions.
Next Steps for Affected Businesses
Submitting feedback during the ongoing consultation window allows private-sector stakeholders to voice practical concerns regarding business continuity and data governance.
Subscribe to our compliance newsletter, or leave a comment below to share your organization’s perspective on these legislative changes.
Keep reading