LowTouristDigital NomadExpat
VPN Legality
Computer Crime Act B.E. 2550 (2007), amended 2560 (2017)
VPN use itself is not illegal in Thailand. However, using a VPN to access blocked content, commit crimes, or circumvent court-ordered website blocks can be prosecuted under the Computer Crime Act. Most tourists and remote workers use VPNs without issue.
Penalties
If used to commit a crime: penalties of the underlying offense apply, plus up to 5 years and 100,000 THB fine under the Computer Crime Act.
Common Scenarios
- Using a VPN to access your home country streaming services
- Connecting to a corporate VPN for remote work
- Using a VPN to access websites blocked in Thailand
Tips to Stay Legal
- VPNs are legal for personal privacy and work purposes
- Do not use VPNs to access gambling sites — the gambling itself is the crime
- Corporate VPN use for remote work is normal and accepted
MediumDigital NomadExpat
PDPA (Personal Data Protection Act)
Personal Data Protection Act B.E. 2562 (2019), effective June 2022
Thailand's PDPA is similar to the EU's GDPR. It requires consent for data collection, provides individuals with rights over their data, and applies to any organization handling personal data of people in Thailand — including foreign businesses and digital nomads running online businesses.
Penalties
Administrative fines up to 5 million THB. Criminal penalties of up to 1 year imprisonment and 1 million THB fine for intentional violations.
Common Scenarios
- Running an online business from Thailand that collects user data
- Being asked to share personal data (passport scans) by hotels or businesses
- Collecting customer data for a freelance project without proper consent
Tips to Stay Legal
- If running a business, ensure you have a PDPA-compliant privacy policy
- You have the right to ask any Thai business what data they hold on you
- Be cautious sharing passport scans — ask businesses why they need the data
HighTouristDigital NomadExpat
Social Media Content Laws
Computer Crime Act B.E. 2550, Section 14; Criminal Code Section 112
Social media posts are monitored in Thailand. Content deemed to insult the monarchy, spread false information, cause public panic, or be obscene can lead to criminal charges. Even liking or sharing such content can be prosecuted.
Penalties
Up to 5 years imprisonment under Computer Crime Act. Lese-majeste content: 3-15 years per count. Spreading false info causing public fear: up to 5 years.
Common Scenarios
- Sharing a political meme that references the Thai monarchy
- Posting negative content about Thailand during a dispute with a local
- Live-streaming at a political protest or sensitive location
Tips to Stay Legal
- Treat all social media posting in Thailand as potentially monitored
- Never share content about the Thai monarchy — even to criticize criticism
- Avoid posting about Thai politics, even from a neutral perspective
- Set your social media profiles to private while in Thailand
LowTouristDigital NomadExpat
SIM Card Registration
Telecommunications Business Act B.E. 2544, NBTC Regulations
All SIM cards in Thailand must be registered with a valid passport. Anonymous SIM cards are illegal. The NBTC (National Broadcasting and Telecommunications Commission) requires biometric data for SIM registration. This data is subject to the PDPA.
Penalties
Unregistered SIM cards are deactivated. Providing false identity for registration: fine up to 100,000 THB.
Common Scenarios
- Buying a tourist SIM card at the airport kiosk
- Purchasing a SIM from a convenience store without passport verification
- Using a SIM card registered to someone else
Tips to Stay Legal
- Always register your SIM card with your own passport at purchase
- Airport SIM kiosks (AIS, TrueMove, DTAC) handle registration on the spot
- Keep your receipt — you may need proof of registration for certain services