Overlapping laws articles
Overlapping laws articles are 3 AIPDPA pieces that quote Thai law word for word and say what organisations must do. They suit DPOs, legal teams and business owners, who get answers with the legal text and links to read further.
Overlapping laws
Overlapping laws90-Day Logs vs the Right to Erasure: When Thailand's Computer Crime Act and the PDPA Pull Apart
A customer emails asking you to delete everything. IT replies that the logs cannot be touched. Both are half right. Here is which data must stay, which must go, and when.
Overlapping lawsPolice Want Customer Data: What a Thai Company May Hand Over
A request from an inquiry official lands on the legal team's desk and the first question is always whether customers must consent first. The PDPC has already answered, and the answer does not end at "yes, send it".
Overlapping lawsFormer Employees' Records: What You May Keep and When You Must Erase
A former employee emails HR: "Delete all my data under the PDPA." HR knows the employment contract, payslips and a disciplinary file may still be needed; IT asks about backups. Section 33 paragraph two of the PDPA answers the first question, and the PDPC's 2024 erasure Notification answers the second. The answer is never "delete everything" or "keep everything": it is file by file.
Topic index
Who stands behind this guide?
Written by the AIPDPA legal team · Content owner: Phuwara Krobtaku, Attorney-at-law · Thai Barrister-at-Law · technology & intellectual property counsel
Lawyer's licence no. 477/2558 · Thai Barrister-at-Law · LL.M. in Intellectual Property & IT Law (Gold Medal)