Department of Business Development Issues Warning on Data Privacy Compliance

On July 29, 2026, the Thai Department of Business Development (DBD) issued a public advisory concerning the handling of corporate information. The department noted that public and private organizations that access or transfer business data from the DBD must strictly adhere to the Personal Data Protection Act (PDPA).

This warning follows reports of instances where corporate information was disseminated without proper authorization. The DBD emphasized that such actions constitute a violation of privacy rights. Entities found to be in breach of these regulations face potential legal consequences, including civil, criminal, and administrative liabilities.

For residents and business owners in Thailand, this development underscores the importance of data governance. If you are involved in business operations that utilize shared government data, it is essential to ensure that your internal processes align with current privacy laws to avoid potential legal exposure.

At this stage, the DBD has not released a specific list of the entities involved in the unauthorized disclosures, nor have they detailed the specific nature of the leaked data. It remains to be confirmed whether the department will initiate formal investigations or legal proceedings against specific organizations in the coming weeks. Stakeholders are advised to monitor official DBD communications for further updates regarding compliance requirements.