In May 2019, Thailand’s Personal Data Protection Act (PDPA) officially became law. Echoing General Data Protection Regulation (GDPR) somewhat, the PDPA regulates personal data collection, storage and dissemination. But while further regulatory developments are required to ensure the law can be fully implemented, businesses should be seeking out legal help to ensure they are compliant now — and not dragging their heels — say lawyers.