Thailand Sees 40% Surge in Data Breaches as PDPA Compliance Risks Grow Thailand’s Personal Data Protection Act (PDPA), fully enforced since 2022, has exposed rising compliance challenges amid a 40% increase in reported data breaches over the past year. According to the Personal Data Protection Committee, foreign nationals and international businesses particularly those in digital transactions and online services are among the hardest hit, facing heightened legal and financial risks. Siam Legal International, a Bangkok-based law firm, has expanded its data protection advisory services in response to growing concerns over PDPA obligations. Spokesperson Rex Baay highlighted that many foreign entities remain unclear about their responsibilities under the law, leading to delayed breach responses, regulatory penalties, and avoidable financial losses. Under the PDPA, organizations must report qualifying breaches to authorities within 72 hours and notify affected individuals if there is a high risk of harm. Non-compliance can result in fines up to 5 million baht, civil liability, or even criminal charges in severe cases. Common causes of PDPA violations include weak cybersecurity measures, poor access controls, insufficient employee training, and improper third-party data sharing. Both cyberattacks and accidental disclosures can trigger legal liability, underscoring the need for proactive breach response planning. For individuals, the PDPA guarantees enforceable rights, including breach notifications, access to data processing details, and compensation for damages regardless of nationality or residency. Siam Legal’s expanded services now cover compliance assessments, breach response strategies, regulatory reporting, and legal remedies for affected parties, aiming to mitigate long-term risks for businesses and individuals alike. The firm operates in Bangkok, Chiang Mai, Phuket, and Hua Hin, offering multilingual legal support in cyber-related matters.