Last review date: January 2025

Yes.

Other laws that may require the retention and storage of personal data (including, for example, where such data is part of another type of record or dataset) in the local jurisdiction or otherwise prohibit the transfer or disclosure of the personal data outside of the local jurisdiction:

☒    other

Last review date: January 2025

☒   Obligation for public sector organizations to share or make accessible non-personal data

☒   Obligation for private organizations to share or make accessible non-personal financial data

If so, please provide brief details of the relevant law or regulation.

The Official Information Act B.E. 2540 (1997) imposes obligations on public sector organizations to make official information accessible for public inspection.

The Credit Data Business Operation Act B.E. 2545 (2002) imposes an obligation on private organizations (e.g., credit information companies) to disclose or provide credit data or credit scoring information to members of the National Credit Bureau for the purpose of analyzing credits.

Last review date: January 2025

☒   Obligation to share data on request

The Credit Data Business Operation Act B.E. 2545 (2002) imposes specific requirements on credit information companies when sharing credit data and credit scoring information with private organizations, such as members of the National Credit Bureau who wish to use this information for analyzing credit and granting credit cards). Specifically, the credit information company must obtain prior consent from the owner of the credit information before disclosing such data to private organizations.