Privacy Representation
Thailand PDPA Representative
Section 37(5) of the Thailand Personal Data Protection Act (PDPA) requires organisations caught by its extraterritorial reach to appoint, in writing, a representative located in Thailand.
Prighter will soon be launching this service. Register your interest today and we'll be in touch with relevant updates.
:quality(80):fill(transparent)){kind=spacer}
Be first in line for Thailand PDPA Representation
This service is being developed. Registering your interest reflects no cost or commitment, and puts you at the front of the queue for our Thailand PDPA Representative service the minute it launches.
-
Now
You register your interest
Register your interest using your email address and the size of your organisation. No payment, no contract, no obligation.
-
Next
We finish the build
Section 37(5) of the PDPA is already in force. We're preparing the local presence, the filings, and the intake process so that we can offer the level of service that our clients have come to expect across our other Representative services.
-
At launch
You hear first
By registering, you'll be contacted before the service goes live, with everything you need to make an informed decision and get started with our PDPA Representative service.
Register your interest
We use your address only to tell you about this service. No newsletter, and you can ask us to delete it at any time.
What a Thailand PDPA Representative does
The Thailand Personal Data Protection Act (PDPA) applies to organisations even without an established entity in the country. Section 5 of the regulation applies to Data Controllers and Processors outside the country when they offer goods or services to people in Thailand, or monitor their behaviour online.
A Thailand PDPA Representative:
Acts as your local representative in Thailand, appointed in writing and authorised to act on your behalf without limitation of liability.
Gives data subjects in Thailand a local point of contact for their rights requests.
Serves as the point of contact for the Office of the Personal Data Protection Committee (PDPC).
Failing to appoint a PDPA Representative is a direct breach of Section 37(5), carrying administrative fines of up to THB 5 million.
As with our other Representation services, Prighter will take care of this, serving as your domestic representative in Thailand, handling filings and inbound requests, so your team can operate from a single dashboard rather than a siloed local intermediary.
The Prighter One-Stop Shop
Security, data protection, and AI and Digital Governance are very closely interconnected and share similar concepts and requirements. With Prighter and our global network of partners you can cover the full digital regulatory landscape with a single provider — ensuring consistency and cost-effectiveness.
Bespoke Service
We can provide you with legal, technical, and security related services in addition to our core products. Rely on the experience and knowledge of our experts to guide you through the constantly evolving framework for digital services.
Resource Center
We provide your in-house team with full access to our resources — knowledge, documentation, and guidelines — to support your compliance efforts. Leverage the proven foundation we've built for clients and tailor it to your specific needs.
Rely on Our Experts
Our team stands beside yours as a trusted and reliable partner. We are there for your individual needs and can help you setup and maintain your tailored security program fitting. Compliance products with a human touch
We already cover much of the globe
Thailand is not live yet, but your obligations elsewhere are. These services run today, from one dashboard and one contract.
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
:quality(80):fill(transparent))
Global Representation FAQs
Is there a single global Representative requirement?
No. Representation requirements are jurisdiction-specific. Each country or region maintains its own legal framework and supervisory authority.
Can one provider manage representation in multiple jurisdictions?
Separate legal mandates are required in each jurisdiction. A coordinated provider can streamline oversight and management across markets.
Does appointing Representatives mean full compliance globally?
No. Representation fulfils formal legal requirements where applicable. Substantive compliance obligations remain with your organisation in each jurisdiction.
How do we determine where we need representation?
This depends on where you offer services, process personal data and operate infrastructure. A structured cross-border assessment is the starting point.