Thailand Cybersecurity Act
In force Thailand · In force May 28, 2019 · no upcoming deadlines
Deadlines
| Date | What happens | When |
|---|---|---|
| Sep 16, 202610 days ago | Website Security Standard B.E. 2568 enforced | 10 days ago |
| May 28, 20197 years ago | Cybersecurity Act in force | 7.3 years ago |
Summaries for reference, not legal advice. Check the official text.
What it does
Thailand's cybersecurity framework for government agencies and critical information infrastructure (CII) operators. It creates the National Cyber Security Committee and the National Cyber Security Agency (NCSA). It also sets codes of practice and standards, incident reporting and response duties, and escalating powers for serious and critical cyber threats. The Committee issues binding standards under the Act, such as the Website Security Standard B.E. 2568.
- Who it applies to
- Government agencies, regulators, and public and private organisations designated as CII in Thailand.
- Penalties
- Criminal fines and imprisonment for non-compliance with orders and duties. Amounts were not verified here.
- Enforced by
- National Cyber Security Committee and National Cyber Security Agency (NCSA)
- Official name
- Cybersecurity Act B.E. 2562 (2019)
- Citation
- Cybersecurity Act B.E. 2562 (2019)
- Topics
- cybersecurity, breach-notification
Research notes
The Royal Gazette site blocks automated access, so the enactment date and penalties were not verified from the gazette. The NCSA website is a single-page app and needs a browser. The National Cyber Security Committee also issued new CII designation criteria on 2025-09-16.
Related
Questions about Thailand Cybersecurity Act
- What are the Thailand Cybersecurity Act compliance deadlines?
- May 28, 2019: Cybersecurity Act in force. Sep 16, 2026: Website Security Standard B.E. 2568 enforced.
- When does Thailand Cybersecurity Act take effect?
- Thailand Cybersecurity Act took effect on May 28, 2019.
- Who does Thailand Cybersecurity Act apply to?
- Government agencies, regulators, and public and private organisations designated as CII in Thailand.
- What are the penalties under Thailand Cybersecurity Act?
- Criminal fines and imprisonment for non-compliance with orders and duties. Amounts were not verified here.