EU Representative for Thai Companies
Complete GDPR Article 27 guide for Thai businesses. Thailand’s PDPA is not GDPR. EU Representative from €490/yr.
Key Takeaways for Thai Businesses
- Thailand’s Personal Data Protection Act (PDPA) does NOT satisfy EU GDPR requirements
- Any Thai business with EU customers, users, or partners must appoint an EU Representative
- Thailand’s export, tourism, and digital sectors are most exposed
- €490/year — 15-minute setup, no EU office needed
Does GDPR Apply to Thai Companies?
Yes. Thailand is a third country under EU GDPR. Thai businesses that process personal data of individuals in the European Union — whether through exporting goods, operating digital services, hosting EU tourists, or partnering with EU companies — are subject to GDPR and must appoint an EU Representative under Article 27.
Thailand’s PDPA vs GDPR
Thailand’s Personal Data Protection Act (PDPA), effective June 2022, is considered one of Asia’s strongest privacy laws and was explicitly modeled on GDPR. However, despite the structural similarities, critical differences remain:
| Requirement | Thailand PDPA | EU GDPR |
|---|---|---|
| EU Representative | Not required for Thai companies | Article 27 mandatory |
| Extraterritorial scope | Data of Thai data subjects (PDPA Sec 5) | Data of EU data subjects globally (Art 3) |
| Data breach notification | 72 hours (to PDPC) | 72 hours (to DPA) |
| Maximum fine | THB 5M (~€130K) | €20M or 4% global turnover |
| Criminal penalties | Up to 1 year imprisonment | Administrative, not criminal |
Thai Businesses Most at Risk
Tourism & hospitality: Thailand’s tourism sector — one of the largest in the world — serves millions of EU visitors annually. Hotels, resorts, travel agencies, tour operators, airlines, and transportation services all process extensive EU personal data: passport details, booking information, preferences, health data, and payment information.
Manufacturing & export: Thai manufacturers and exporters in automotive, electronics, food processing, and textiles processing EU customer data. Thai food exporters (rice, seafood, fruit, canned goods) maintain EU distributor databases with personal data.
Digital & e-commerce: Thai e-commerce businesses selling through Lazada, Shopee, Amazon EU, or direct channels. Thai digital agencies, software developers, and outsourcing firms serving EU clients.
Agriculture: Thai agricultural exporters — the world’s largest rubber exporter, major rice exporter — process contact data of EU buyers, importers, and distributors.
What EU Shield Provides for Thai Clients
- EU-established legal address for regulatory correspondence
- 24-hour correspondence forwarding guarantee
- Record keeping of processing activities (Article 30)
- Designation letter compliant with Article 27(3)
- Thai and English support
- Cross-border data transfer guidance
- Support for both GDPRA and PDPA dual compliance scenarios
Ready to get compliant?
€490/year. 15-minute setup. Active next business day.