PDPA explainer

PDPA Thailand: Data Subject Rights

How data subject access rights work under Thailand's PDPA, and how an access request appears in a real documented case.

General principle

Access rights usually cover the data itself, the purposes, the recipients and the source of the data.

Where a record also contains another person's data, a controller may consider redaction rather than blanket refusal.

Direct requests were made for records including the original recording. What was provided, and what exists, is documented in the evidence matrix.

This section is not a legal conclusion and does not state that any party is at fault.