Event Highlights

Responsive Data Governance for Thailand’s Digital Economy

On 28 March 2025, the Tech for Good Institute and the Thailand Development Research Institute (TDRI) hosted a roundtable discussion on how Thailand can develop well-crafted and responsive data governance frameworks that promote data protection, cybersecurity, and innovation.

Data is an indispensable component of a growing digital economy. It enables the development and deployment of technological solutions, including emerging technologies such as artificial intelligence, big data, blockchain, and cloud computing. These technologies underpin the advancement of key economic sectors that contribute to national development, including health, manufacturing, and tourism, among others.

This reality is no different in Thailand. As one of the fastest-growing digital economies in Southeast Asia, data and the broader data ecosystem remain critical components of Thailand’s ambition to become a regional digital hub. The government recognises the importance of developing a robust data ecosystem, as reflected in initiatives focused on data infrastructure, open government, and data inclusion. Significant investments are also being made in cloud technologies and data centres, supporting the broader vision of enabling Thailand to become a data-driven nation that empowers both the public and private sectors.

To explore how Thailand can create responsive and future-proof data governance mechanisms, the Tech for Good Institute and the Thailand Development Research Institute (TDRI) hosted a roundtable discussion with government stakeholders and policy experts. The session served as an open forum to examine how Thailand can design data governance frameworks that ensure data protection, cybersecurity, and fair competition, while simultaneously fostering innovation and economic growth. The discussion also identified key priority areas necessary to support the development of a well-designed and responsive data governance framework for Thailand.

Moderators and Speakers:

Usanisa Khun-ekanan, Director of the Office of e-Commerce, Electronic Transactions Development Agency (ETDA)
Jeerichuda Juntrabut, Law Development Center Officer, Electronic Transactions Development Agency (ETDA)
Jarin Wongsuwanvaree, Legal Consultant, Electronic Transactions Development Agency (ETDA)
Apichaya Makarapruek, Officer, Electronic Transactions Development Agency (ETDA)
Kaewklao Uthairattanakit, Director of Policy, Strategy and Foreign Affairs, Big Data Institute
Salinthip Ovataga, Office of the Permanent Secretary, Ministry of Digital Economy and Society
Thaya Navanukroh, Digital Policy Officer, Policy and Strategy Division, Digital Economy Promotion Agency (DEPA)
Kavisara Thitasut, Digital Policy Officer, Policy and Strategy Division, Digital Economy Promotion Agency (DEPA)
Samapoom Sukanan, Head of Personal Data Protection Audit Section, Office of Audit and Supervision, Personal Data Protection Committee
Netithon Losophonkul, Personal Data Protection Specialist, Personal Data Protection Commiittee
Professor Pawee Jenweranon, Lecturer at the Faculty of Law, Thammasat University
Wichayada Amponkitviwat, Researcher, TDRI
Khemmapat Trisadikoon, Senior Researcher, TDRI
Krissada Maleewong, Specialist Position, Digital Government Development Agency
Citra Nasruddin, Programmes Director, Tech for Good Institute
Keith Detros, Programme Manager, Tech for Good Institute

Key Takeaways:

1. Enabling a strong government-to-government data sharing framework will be a crucial foundation for establishing comprehensive data governance and regulations in Thailand.

As noted in the ongoing research conducted by TDRI, there are key challenges to creating a strong data governance framework in Thailand. Firstly, legal uncertainty persists due to the absence of a comprehensive law that fully addresses all aspects of data sharing. This is compounded by regulatory fragmentation, where multiple agencies oversee different elements of data governance, leading in turn to inconsistencies in policy implementation. In addition, technical barriers, which includes limited data interoperability, also complicate efforts to create a seamless data ecosystem.

In addressing these challenges, speakers recognised the importance of government agencies leading by example. Participants noted that even within the public sector, agencies are often hesitant to share information with one another due to unclear policies, insufficient trust, and a lack of clear roles and responsibilities. To overcome this, strong government-to-government coordination is needed to demonstrate that responsible data sharing is possible.

A key point highlighted was that no amount of incentive for public-private data sharing will be effective without clear proof that government agencies can share data effectively among themselves. Doing so would lay the groundwork for broader open data initiatives and foster greater collaboration with the private sector, while enhancing Thailand’s competitiveness in the digital economy. Key policy recommendations include drafting a Data Sharing Act with clear guidelines on data access, ownership, and liability, as well as establishing a national data governance body to oversee data sharing policies.

2. Building trust through systems, standards and skills.

Throughout the discussion, there was clear agreement among stakeholders that building trust requires more than just secure infrastructure. Rather, strong systems, clearly defined standards, and a skilled workforce are needed to manage and protect data responsibly. While this cannot be built overnight, these three key areas must serve as the foundation of responsive data governance.

Systems: Participants pointed out that existing systems must be responsive and adaptive. The current mechanisms in place should demonstrate their effectiveness. Digital public infrastructure, such as digital identification systems, should be established and verifiable. In addition, when there are requests for data from government agencies, there should be clear communication with the public regarding the status and resolution of such requests. This helps build trust and fosters confidence that the systems in place are sufficient to meet the needs of Thailand’s digital ecosystem.
Standards: Establishing clear and consistent data standards is also important. This applies not only to the types of standards being maintained but also to the format of data, allowing for uniformity and simplicity, and facilitating the ease of data transfer. Standards should not be limited to the data itself but should also encompass principles of security and safety. The government must ensure that data shared with public agencies is properly protected and safeguarded.
Skills: Investment in the skills of the public sector workforce is paramount. This includes not only technical expertise but also the cultivation of a forward-looking mindset. Upskilling programmes, such initiatives like the Digital Skills Roadmap, play a critical role. These programmes aim to promote digital literacy for all citizens and foster data-driven career pathways. Public and private sector collaboration in developing education platforms can further strengthen Thailand’s capacity to govern and innovate responsibly.

3. An inclusive process for regulatory clarity is essential for a responsive data governance framework.

Finally, regulatory clarity was identified as a foundational enabler of effective and consistent data governance. Clear and comprehensive legal frameworks are needed to specify what types of data sharing are permitted, protected, and prioritised. This is where a comprehensive law could play a critical role, by clearly defining specific goals, standards, and responsibilities. Participants noted that while Thailand’s Personal Data Protection Act (PDPA) provides an important starting point, significant gaps remain. For example, uncertainties persist regarding implementation, coordination, and incentives for data sharing — even among government agencies themselves. There was a strong call for greater coordination and collaboration among government agencies, particularly in the interpretation and implementation of existing laws and policies. Participants also emphasised the importance of developing Open Data and Interoperability Standards to enable seamless data exchanges across sectors. For businesses, it is also worth considering that sharing key insights, rather than raw data that may be proprietary in nature, could be a more balanced approach. This would allow data collaboration without inadvertently stifling innovation

In addition, speakers emphasised the need for a more inclusive regulatory process, which could contribute to greater regulatory clarity by clearly defining the roles of various stakeholders in the digital ecosystem. Not only are public and private sector groups essential in building a robust data environment, but representatives from civil society and the academic sector should also be involved. This inclusive approach ensures that legal frameworks are understandable, practical, and aligned with real-world needs. Initiatives such as regulatory sandboxes — where new data governance rules can be tested with stakeholder input before full implementation — were highlighted as effective tools. Clarifying the original intent behind existing laws and making necessary adjustments will help ensure that regulations remain relevant to technological and societal developments. Ultimately, data governance frameworks must be built on the principles of transparency, credibility, and inclusivity to foster long-term trust in Thailand’s digital economy.