Yes, two-party consent recording is legal in Thailand, but only under strict conditions outlined by the Personal Data Protection Act (PDPA) 2019 and the Computer Crime Act (CCA) 2017, with enforcement by the Office of the Personal Data Protection Commission (PDPC). Unauthorized interception risks fines up to THB 5 million or imprisonment under CCA §6, while PDPA violations may trigger corrective orders or penalties. Recent 2026 amendments tighten compliance, requiring explicit consent for recordings involving sensitive data.
Key Regulations for Two-Party Consent Recording in Thailand
- Explicit Consent Requirement: Under PDPA §24, recording conversations requires prior written or digital consent from all parties, with clear disclosure of purpose and data retention periods. Verbal consent alone is insufficient for compliance.
- Sensitive Data Restrictions: Recordings containing biometric, financial, or health data face stricter scrutiny under PDPA §26, mandating additional safeguards and data minimization principles.
- Interception Prohibitions: CCA §6 criminalizes unauthorized interception of electronic communications, including surreptitious recordings, punishable by up to 3 years imprisonment and/or THB 600,000 in fines. Businesses must document consent trails for audit purposes.
Violations are prosecuted by the PDPC and Royal Thai Police Cyber Crime Division, with cross-border enforcement possible under ASEAN Data Protection Framework agreements. Employers recording workplace communications must align with Labor Protection Act §10, ensuring consent aligns with employment contracts. Always verify jurisdiction-specific exemptions, such as law enforcement or national security exceptions.