Data and AI law, read from the actual text
Data and AI law, read from the actual text, is AIPDPA's series of 68 articles on situations Thai organisations really face. Each reads the PDPA, PDPC notifications, TDPG 4.0 and related laws together, for DPOs, legal and HR teams, with the legal text quoted word for word.
Latest · page 6 of 6
PDPA in practiceWhich Thai Companies Must Appoint a DPO? The 2023 Test
Thai law does not make every company appoint a DPO. But the PDPC's 2023 notification draws the line more sharply than most people realise, with a 100,000-person threshold and a list of businesses that qualify automatically.
Intellectual propertyWho owns work made with AI under Thai copyright law?
Marketing teams use AI for ad images and captions every day, yet few ask whether that work is protected at all, and if so whether it belongs to the employee, the company, the agency or no one. Thailand's Copyright Act answers some of this. Much of it remains open.
Intellectual propertyOutsourced Software in Thailand: Who Owns the Copyright?
Paying in full and receiving the files does not make the software yours. Thai copyright law treats commissioned work and employee work in opposite ways, and an assignment that forgets to state a term may last only ten years.
Cloud and cross-border dataCloud email and shared drives: when does your data leave Thailand?
Almost every Thai company runs on email, drives, chat and video calls hosted outside the country. Server location is not the test. What the PDPA looks at is who can access the data. This guide goes action by action: what counts as a transfer, what does not, and which basis applies when it does.
Topic index
Who stands behind this guide?
Written by the AIPDPA legal team · Content owner: Phuwara Krobtaku, Attorney-at-law · Thai Barrister-at-Law · technology & intellectual property counsel
Lawyer's licence no. 477/2558 · Thai Barrister-at-Law · LL.M. in Intellectual Property & IT Law (Gold Medal)