What rules apply to cross-border data transfers under the Thai Personal Data Protection Act (PDPA) — Every concierge item sits under its own statute — driving licences under the motor-vehicle law, address notification under the Immigration Act B.E. 2522, personal-effects importation under customs law — so each is checked on its own terms. Where a visa class requires health insurance, the minimum sum insured is the figure published by the issuing authority at the time of filing. Importing a pet requires prior permission from the Department of Livestock Development with a veterinary health certificate and rabies vaccination record. A foreigner present in Thailand for 180 days or more in a tax year is a Thai tax resident under the Revenue Code. Government fees can be revised by ministerial regulation, so the current rate must be confirmed on the filing date. Corporate documents must be a recent certified extract from the Department of Business Development bearing the registered company seal. The final decision rests with the authority or destination embassy; we prepare a complete file but cannot guarantee an outcome. If filing by post, use a trackable service and enclose the return envelope the office specifies. We confirm at the outset that the chosen document route actually matches the receiving body’s requirements before quoting time and cost.
“What rules apply to cross-border data transfers under the Thai Personal Data Protection Act (PDPA)?” falls within an end-to-end service that combines document preparation, translation, signature certification, consular legalisation and coordination with the destination mission into a single file. The people who search for it are usually preparing a filing against a fixed deadline, recovering from a rejected submission and trying to identify the missed step, or coordinating documents for several people at once.
In practice, each step sits with a different body: the issuing office, the Notarial Services Attorney, the Department of Consular Affairs, and the destination country’s diplomatic mission. Knowing which body owns which step makes it possible to judge how many stages a bundle needs, and which of them cannot be corrected without starting again.
This is a baseline set. Individual receiving authorities may add requirements, so confirm with the destination body first.
Record how many stages each document needs, who certifies it, and what must finish first, so no step has to be redone.
Check personal names, company names, addresses and dates across the whole bundle before any certification begins.
Original → translation → signature certification / legalisation → destination mission. Doing these out of order forces a restart.
Verify the number of sets, the seals, the binding, and that issue dates are still within the destination’s validity window.
| Route | When it applies |
|---|---|
| Notarial Services Attorney certification | For privately drafted instruments — powers of attorney, affidavits, consent letters — signed in the attorney’s presence. |
| Legalisation at the Department of Consular Affairs | Where a foreign authority needs confirmation of the Thai issuing office’s signature and seal, or of the translation. |
| Attestation at the destination mission | Where the destination country requires its embassy or consulate in Thailand to attest the file after consular legalisation. |
| Thailand’s Apostille status | Thailand acceded to the Apostille Convention on 30 June 2026 and it enters into force for Thailand on 28 February 2027. No Apostille is issued in Thailand before that date. |
If you are working through “What rules apply to cross-border data transfers under the Thai Personal Data Protection Act (PDPA)?”, start by getting the receiving authority’s requirement in writing, then plan the certification chain backwards from your real filing date.