Section 5

This Act applies to the collection, use, or disclosure of

Personal Data by a Data Controller or a Data Processor that is in the Kingdom of Thailand,
regardless of whether such collection, use, or disclosure takes place in the Kingdom of Thailand or not.
In the event that a Data Controller or a Data Processor is outside the Kingdom of Thailand,
this Act shall apply to the collection, use, or disclosure of Personal
Data of data subjects who are in the Kingdom of Thailand, where the activities of such Data Controller or Data
Processor are the following activities:

(1)the offering of goods or services to the data subjects who are in the Kingdom of Thailand,

irrespective of whether the payment is made by the data subject;

(2)the monitoring of the data subject’s behavior,

where the behavior takes place in the Kingdom of Thailand.