Following on from Thailand's Personal Data Protection Act (PDPA) coming into effect last month, the Thai Cabinet has approved a new Draft Royal Decree that aims to clarify what type of activities will allow certain types of data controllers to be exempt from obligations under the PDPA.

The Draft Royal Decree details 3 categories of personal data processing activities in the public's interest that will be exempt from compliance obligations, namely: public security and taxation; public interests and international cooperation; and legal proceedings and relevant cooperation between the courts and organizations.

The Draft Royal Decree is still awaiting approval from the relevant authorities and will come into effect after publication in the Royal Gazette. Until then, you can access further information on this development by clicking on the link provided.