No, doxxing in Thailand is illegal under multiple laws, including the Computer Crime Act B.E. 2560 (2017) and the Personal Data Protection Act B.E. 2562 (2019). Unauthorized disclosure of personal data with intent to harm, harass, or intimidate violates civil and criminal provisions, risking fines up to THB 5 million or imprisonment. The Office of the Personal Data Protection Commission (PDPC) enforces compliance, while the Royal Thai Police Cyber Crime Division actively investigates violations.
Key Regulations for Doxxing in Thailand
- Computer Crime Act (2017): Prohibits the dissemination of false or defamatory electronic data (Section 14) and unauthorized access to computer systems (Section 6), with penalties including up to 5 years imprisonment and fines up to THB 100,000.
- Personal Data Protection Act (PDPA, 2019): Mandates strict consent requirements for personal data processing; unauthorized sharing of personal information (e.g., addresses, financial details) constitutes a breach, subject to administrative fines (up to THB 5 million) and potential criminal liability under Section 95.
- Penal Code (Sections 326–333): Criminalizes defamation and harassment; doxxing often overlaps with these offenses, carrying penalties of up to 2 years imprisonment or fines, with aggravated penalties if the act incites violence or public disorder.
Enforcement has intensified amid rising digital harassment cases, particularly targeting activists and public figures. The PDPC’s 2026 regulatory updates now require data controllers to implement stricter safeguards, including breach notification protocols within 72 hours. Violators face escalated penalties, including temporary business suspension.