Incidents of unauthorized disclosure of personal information to third parties has raised concern over personal data security across the globe. In 2015, GDPR went into effect, and to comply with international standards, Thailand has adopted the provisions of the GDPR and introduced the Personal Data Protection Act B.E. 2562, which was partially enacted on May 28, 2019, with a transitional period of one year. The Thai cabinet had further postponed the full enforcement of the PDPA until June 1, 2022.