Last review date: January 2025
No.
Last review date: January 2025
No.
Last review date: January 2025
Yes.
If yes, please provide brief details and a link.
The Operational Guideline re: the Notification of the Purposes and Details of Collection of Personal Data from the Data Subjects under the PDPA recommends that when a data controller collects, uses, or discloses personal data from sources other than direct collection from the data subjects, especially when new technology is involved in processing or disclosing personal data of a large number of persons (e.g., through the use of artificial intelligence), the data controller should conduct a Data Protection Impact Assessment (DPIA).
No enforcement activity to date
Last review date: January 2025
☒ Draft legislation in progress
If yes, please provide brief details and a link.
Two draft legislations that impose restrictions on the use of artificial intelligence have been introduced in Thailand: (i) the Draft Royal Decree on Business Operations that Use Artificial Intelligence System, which aims to regulate artificial intelligence on a risk-based approach; and (ii) the Draft Act on the Promotion and Support of AI Innovations in Thailand, which aims to promote and provide necessary support for the development of an AI ecosystem through legal mechanisms. However, the Draft Royal Decree and Draft Act are still "draft" laws and may be subject to change.