The Force Behind Our Rights to Data Privacy

Thailand’s new Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) is the most comprehensive Thai data privacy law to date. It governs the collection, use and disclosure of personal data within Thailand and sets out the criteria on the transfer of data overseas. PDPA has been published in the Government Gazette on May 27, 2019 and the provisions will come into full force, affecting all businesses and corporations operating in Thailand on June 1, 2021.


In general, Thailand’s PDPA is essentially derived from the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”). Although there are many similarities between these two pieces of legislation, adjustments had been made to fit the Thai context.

Immediate assessment of internal personal data governance is vital to protect businesses before the penalties kick in. The PDPA imposes punishment for non-compliance of up to THB 5 million in administrative fines and up to THB 1 million in criminal fines.

KAP Cloud, a subsidiary of Kudun and Partners, together with various digital and technology solution providers are teaming up to provide a comprehensive solution for our client’s PDPA compliance. We believe technology and legal expertise need to come hand in hand to address this issue.

We have a dedicated team who is keen to understand our client’s business and in helping them achieve their purpose in navigating the complex regulation of data and achieving their goals and objectives.

Our dedicated Data Privacy and Protection team is ready to assist you on the following matters:

  • Data Privacy Regulations and Policies
  • Data Analysis/ Gap Analysis Including Data Mining
  • Compliance On Data Transfers, Data Controllers And Data Processor Agreements
  • Data Security Issues On Cloud Storage And Outsourcing Services
  • Data Security Issues On Website and Social Media
  • Internal Consents
  • Privacy Notices
  • Use of Encryption Devices of Employees
  • E-Commerce and M-Commerce businesses

Your one-stop service provider on your journey towards data privacy compliance

Since GDPR became enforceable in 2018, the team in Kudun and Partners has invested a special interest in issues related to personal data privacy and data protection. When Thailand’s PDPA was passed in 2019, we were already at the forefront of the Act, providing innovative legal and business solutions to various clients from different industries on this matter.


Representing and providing advice to Business Online PLC and its group of companies on the Personal Data Protection Act (PDPA) and the Cybersecurity Act.

Reviewing and providing legal updates on PDPA for OneTrust Data Guidance, a global regulatory research software company on its Data Transfers Guidance Note for Thailand.

Representing Dun & Bradstreet Thailand in relation to data protection and data compliance concerning commercial arrangements with third-party service providers.

Deal highlights

BGC Packaging

Kudun and Partners Represents BGC Packaging Co., Ltd. in Strategic Acquisition of 25.1% Shares in Bangkok Can Manufacturing Company Limited

Kudun and Partners is proud to announce its successful representation of BGC Packaging Co., Ltd. in the strategic acquis...

Read more
wind energy

Kudun and Partners Represents B. Grimm Power Public Company Limited in Power Plant Acquisitions in South Korea

Kudun and Partners, as a co-counsel together with Jipyong LLC, a Korean firm, has successfully represented B. Grimm Powe...

Read more
Hausen Bernstein

Kudun and Partners Assists Hausen Bernstein Co., Ltd. on a joint venture with Chemopharm SDN. BHD.

Kudun and Partners represented the sponsors and shareholders of Hausen Bernstein Co., Ltd., a Thailand-based healthcare ...

Read more

Our experts

KAP Cloud was founded to help our clients achieve their purpose in navigating the complex regulation of data and remains as trusted business advisors to every client. Meet our team of experts below.



Email Read more



partner Email Read more



Associate Email Read more

Get in touch

Worried if your company may be penalized for non-compliance with data privacy? Get in touch with us by telephone or send us your enquiries using the contact form and we will get back to you as soon as possible.

TEL: 662 838 1750 FAX: 662 838 1795