What Thailand PDPC Subordinate Regulations on Cross-Border Personal Data Transfers 2023/2024 - Green Route (Section 28) and Safeguard Route (Section 29), Effective 24 March 2024 requires
Data controllers in Thailand transferring personal data internationally must comply with the two subordinate regulations under the Personal Data Protection Act (PDPA) published in the Government Gazette on 25 December 2023 and effective from 24 March 2024, choosing between the Adequacy route (Section 28, the Green Route, applicable where the destination is on the PDPC adequacy list which is currently empty) and the Appropriate Safeguards route (Section 29, the Safeguard Route, available through Standard Contractual Clauses based on ASEAN or EU models with Thai-specific obligations such as 72-hour breach reporting, certification, or binding instruments between Thai and foreign government agencies), treating all current cross-border transfers as going to non-adequate destinations requiring proper safeguards until the PDPC publishes an adequacy list.
Pillar: Data Protection & Privacy · Authority: Thailand Personal Data Protection Committee (PDPC) · Version: 1.0.0 · Last updated:
Primary source: https://www.pdpc.or.th/en/
SHA-256 integrity: 84eb653f38825e17788858e6d69879cc2b89f3241463cc3cb267fe9e0ef34068
Primary Citations — 6 traced to source
- On 25 December 2023, Thailand's Personal Data Protection Committee (PDPC) published two subordinate regulations regarding cross-border transfer of personal data under the PDPA in the Government Gazette, which came into force on 24 March 2024.
- The restrictions on international data transfers were clarified in the December 2023 regulations under Sections 28 and 29, establishing two compliance pathways: the Adequacy route (Section 28), referred to as the Green Route, and the Appropriate Safeguards route (Section 29), designated as the Safeguard Route.
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/th-pdpa-cross-border-data-transfer-regulations-2024.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/th-pdpa-cross-border-data-transfer-regulations-2024.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/th-pdpa-cross-border-data-transfer-regulations-2024
- Back to registry: Browse all 10,099 compliance nodes