Thailand’s PDPC Demands Compliance Documentation from Health Ministry and TSD

According to a report by Thai Post on July 29, 2026, the Personal Data Protection Committee (PDPC) is intensifying its oversight of personal data security in Thailand. The regulatory body has officially requested that the Ministry of Public Health and the Thailand Securities Depository (TSD) provide further documentation and evidence to demonstrate their adherence to the Personal Data Protection Act (PDPA).

This regulatory action follows the PDPC’s ongoing monitoring of two specific cases involving the handling of sensitive personal information. By requiring these major entities to submit comprehensive proof of their data protection measures, the committee aims to ensure that institutional practices align with national privacy standards.

For residents and expatriates in Thailand, this development highlights the government's commitment to enforcing data privacy regulations across both public health and financial sectors. While the request for documentation is a standard administrative procedure, it underscores the importance of data security for individuals interacting with these institutions. At this stage, it remains to be confirmed what specific gaps in compliance, if any, prompted this request, and how the Ministry of Public Health and the TSD will respond to the PDPC’s deadline for submission. The public awaits further updates on whether these entities will face additional scrutiny or if the requested evidence will satisfy the committee’s requirements.