Thailand adopts binding corporate rules for intra-group data transfers

On 17 February 2026, Thailand's Regulation on the Examination and Certification of Binding Corporate Rules within the Same Affiliated Business or the Same Group of Undertakings B.E. 2568 (2025) (“BCR Regulation”) took effect following publication in the Government Gazette. Issued by the Office of the Personal Data Protection Committee (“PDPC”), the BCR Regulation establishes a formal mechanism for organisations to obtain certification of their Binding Corporate Rules, a cross‑border transfer... By: Hogan Lovells