// Privacy
Thailand Personal Data Protection Act Compliance Software
Thailand's data protection law modelled closely on the GDPR.
Framework at a glance
Short name
TH PDPA
Version
2022
Category
Privacy
Controls
24
What TH PDPA covers
24 controls across 5 domains — every one tracked, owned and evidenced in Cyber Horizon.
Lawful Processing
9 controls- S.19 Consent Requirement
- S.19(5) Right to Withdraw Consent
- S.20 Consent for Minors and Incompetent Persons
- S.22 Collection Limited to Necessity
- S.23 Notice at Collection
International Transfers
2 controls- S.28 Cross-Border Transfer to Adequate Destinations
- S.29 Safeguards for Intra-Group and Other Transfers
Rights of the Data Subject
6 controls- S.30 Right of Access
- S.31 Right to Data Portability
- S.32 Right to Object
- S.33 Right to Erasure
- S.34 Right to Restriction of Processing
Controller and Processor Obligations
5 controls- S.37(1) Security Measures
- S.37(3) Deletion or Anonymisation on Expiry
- S.37(4) Breach Notification to the PDPC
- S.39 Records of Processing Activities
- S.40 Data Processor Obligations
Governance and Accountability
2 controls- S.41 Appointment of a Data Protection Officer
- S.42 Duties of the Data Protection Officer
How Cyber Horizon automates TH PDPA
Every TH PDPA control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is Thailand Personal Data Protection Act?
Thailand's data protection law modelled closely on the GDPR.
How many controls does Thailand Personal Data Protection Act have?
Thailand Personal Data Protection Act (2022) has 24 controls in Cyber Horizon's catalogue, organised across 5 domains.
How does Cyber Horizon help with Thailand Personal Data Protection Act?
Cyber Horizon maps Thailand Personal Data Protection Act into a shared control library alongside every other framework you run, so evidence collected once counts towards TH PDPA and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Privacy frameworks
See TH PDPA mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of TH PDPA in Cyber Horizon.