Thailand Recording Laws: Privacy Rules and Penalties (2026)

Overview of Recording Laws in Thailand

Thailand does not have a single, dedicated wiretapping or recording law. Unlike countries such as the United States, which passed the Wiretap Act in 1968, or Australia, which enacted the Telecommunications (Interception and Access) Act, Thailand governs recording and surveillance through a patchwork of constitutional provisions, criminal statutes, procedural rules, and data protection legislation.

This fragmented approach creates genuine uncertainty. Whether a recording is legal depends on who made it, where it was made, what purpose it serves, and which law a court decides to apply. The result is a system where the same recording might be perfectly acceptable as evidence in a civil lawsuit but thrown out of a criminal trial.

The key laws that touch on recording in Thailand include:

• Constitution of the Kingdom of Thailand B.E. 2560 (2017), Sections 32 and 36
• Criminal Code B.E. 2499 (1956), Sections 322 through 325
• Criminal Procedure Code, Sections 226 and 226/1
• Personal Data Protection Act (PDPA) B.E. 2562 (2019)
• Computer-Related Crime Act B.E. 2550 (2007)
• Telecommunications Business Act B.E. 2544 (2001)
• Civil and Commercial Code, Section 420 (tort liability)

For anyone living in, visiting, or doing business in Thailand, understanding how these laws overlap is essential. A misstep can lead to criminal charges, civil liability, or both.

Constitutional Privacy Protections

The 2017 Constitution establishes the baseline for all recording and privacy law in Thailand. Two sections matter most.

Section 32: Right to Privacy

Section 32 states that every person enjoys the right to privacy, dignity, reputation, and family. It goes further: any act that violates or affects these rights, or any exploitation of personal information "by any means whatsoever," is prohibited unless authorized by a law enacted specifically for the public interest.

This is broad language. It does not mention recordings specifically, but courts have interpreted it to cover audio recording, video surveillance, and the collection of personal data. The phrase "by any means whatsoever" is the operative clause that pulls recording activity into constitutional territory.

The practical effect is that recording someone without a lawful basis can be framed as a constitutional violation. However, Section 32 is not self-executing in the way a criminal statute is. You cannot be arrested solely for violating Section 32. Instead, it provides the legal foundation that other laws build on.

Section 36: Liberty of Communication

Section 36 protects the liberty of communication by any means. Censorship, detention, or disclosure of information communicated between persons is prohibited. So is "any commission of an act carried out to know or obtain information communicated between persons."

The exception: a court order, or grounds prescribed by law.

This section is the closest Thailand comes to a constitutional wiretapping prohibition. Intercepting a phone call, reading private messages, or recording a conversation between two other people all fall within its scope. But again, enforcement runs through other statutes.

Criminal Code Sections 322-325: Disclosure of Secrets

The Criminal Code B.E. 2499 (1956) contains four sections that address the disclosure of private information. These are not recording laws in the strict sense, but they criminalize conduct that often accompanies unauthorized recording.

Section 322: Opening Private Correspondence

Anyone who breaks open, takes away, or intercepts sealed letters, telegrams, or documents belonging to another person, with the intent to learn or disclose their contents, faces imprisonment of up to six months, a fine of up to THB 1,000, or both. The act must be "likely to cause injury" to qualify.

While Section 322 was written with physical mail in mind, Thai legal scholars have argued it extends to electronic communications by analogy. Courts have not uniformly adopted this interpretation, which is one reason the legal landscape remains unclear.

Section 323: Professional Confidentiality

This section targets professionals who learn secrets through their work. Doctors, pharmacists, midwives, lawyers, auditors, and priests who disclose private information acquired through their professional duties can face the same penalties as Section 322: up to six months in prison, a fine of up to THB 1,000, or both.

The relevance to recording is indirect but real. A doctor who records a patient consultation and shares it, or a lawyer who records a client and leaks the recording, would face liability under Section 323 in addition to any privacy claims.

Section 324: Trade and Industrial Secrets

Section 324 covers anyone who, through a duty or position of trust, learns a trade secret, scientific discovery, or industrial invention and then discloses or uses it for personal benefit or for the benefit of another person. The penalties mirror Sections 322 and 323.

This section matters for workplace recordings. An employee who records proprietary business discussions and shares them with a competitor could face prosecution under Section 324.

Criminal Procedure Code: Sections 226 and 226/1

These two sections of the Criminal Procedure Code determine whether recordings can be used as evidence in Thai criminal courts. They are among the most consequential provisions for anyone considering whether to make a secret recording.

Section 226: The Exclusionary Rule

Section 226 establishes that material evidence, documentary evidence, or personal evidence may be admitted in court to prove guilt or innocence. However, such evidence must not have been obtained through inducement, promises, threats, deception, or "other improper means."

Thai courts have interpreted "other improper means" to include recordings made in violation of privacy rights. If a recording was obtained by trespassing, by planting a hidden device in someone's home, or by intercepting a phone call without authorization, Section 226 provides grounds for exclusion.

The exclusionary rule in Thailand functions differently from its American counterpart. In the U.S., the exclusionary rule is rooted in the Fourth Amendment and applies primarily to government actors. In Thailand, Section 226 can apply to evidence gathered by private citizens as well.

Section 226/1: The Balancing Exception

Section 226/1 creates a critical exception. Even when evidence was obtained improperly or illegally, the court may still admit it if doing so "will be more beneficial to the administration of justice than the harm caused by the impact on the standards of the criminal justice system or the basic rights and freedoms of the people."

This is a balancing test. The court weighs the value of the evidence against the severity of the rights violation. In practice, courts are more likely to admit secretly recorded evidence in cases involving serious crimes, such as corruption, human trafficking, or organized crime, where other evidence is difficult to obtain.

Section 226/1 gives Thai judges significant discretion. There is no bright-line rule about when a recording will or will not be admitted. Each case turns on its facts.

Recordings as Evidence: Criminal vs. Civil Courts

The treatment of recorded evidence in Thailand depends heavily on whether the case is criminal or civil. The two systems apply different standards.

Criminal Proceedings

In criminal cases, the default position is that secretly recorded evidence is inadmissible under Section 226. The prosecution bears a high burden to justify the use of improperly obtained evidence, and courts apply the Section 226/1 balancing test cautiously.

That said, when a recording captures evidence of a serious offense and no other evidence is available, courts have admitted it. The decision is always case-specific. Defense attorneys routinely challenge secretly recorded evidence on constitutional grounds, citing Sections 32 and 36 of the Constitution.

Civil Proceedings

Civil courts in Thailand are more receptive to recorded evidence. The Thai Supreme Court has accepted secret recordings in civil disputes on multiple occasions. In Supreme Court Judgment No. 4674/2543, the court allowed a secret recording because no law explicitly prohibited it in the civil context and the evidence helped resolve the dispute.

Similarly, Supreme Court Judgment No. 3911/2534 accepted a secretly recorded conversation as admissible evidence in a civil case.

The takeaway: if you have a civil dispute in Thailand and possess a recording that supports your claim, courts are more likely to consider it. But the recording could still expose you to separate criminal or civil liability for making it in the first place.

The Personal Data Protection Act (PDPA)

The PDPA B.E. 2562 (2019) is Thailand's most significant privacy legislation. It came into full force on June 1, 2022, and it has reshaped the legal landscape for recording in both personal and commercial contexts.

The PDPA applies to the collection, use, and disclosure of personal data. A voice recording, a video recording, or a photograph that identifies a specific individual all qualify as personal data under the Act.

Consent Requirements Under the PDPA

Section 19 of the PDPA states that a data controller shall not collect, use, or disclose personal data unless the data subject has given prior consent. Consent must be:

• Explicit: Given in writing or through an electronic system.
• Informed: The data subject must understand what data is being collected and why.
• Freely given: Consent obtained through coercion or deception is invalid.
• Withdrawable: The data subject can revoke consent at any time, and withdrawal must be as easy as giving consent.

Exceptions exist for legitimate interests, legal obligations, vital interests, public tasks, and research purposes. But for most private recording scenarios, consent is required.

The PDPA also imposes special restrictions on sensitive personal data, which includes information about race, ethnicity, political opinions, religious beliefs, health, and criminal records. If a recording captures sensitive data, explicit consent is mandatory unless a specific exception applies.

PDPA Penalties

The penalties for PDPA violations are substantial and come in three categories:

• Administrative fines: Up to THB 5 million per offense (approximately USD 145,000).
• Criminal penalties: Imprisonment of up to six months and fines of up to THB 500,000 for unauthorized use or disclosure of personal data. If the violation was committed for commercial gain, the penalties double to up to one year in prison and THB 1 million in fines.
• Civil liability: Affected individuals can sue for actual damages, and courts may award punitive damages of up to twice the actual damages.

PDPA Enforcement Activity

Enforcement was slow in the PDPA's early years, but it has accelerated. By August 2025, the Personal Data Protection Committee (PDPC) had issued five enforcement cases covering eight fines totaling over THB 21.5 million. The largest single fine was THB 7 million, imposed on a major online retailer for failing to protect personal data.

The PDPC has published a national data protection plan for 2024 through 2027 that prioritizes stronger enforcement and public awareness. Businesses that record calls or operate surveillance systems should expect increased scrutiny.

Computer Crime Act and Electronic Surveillance

The Computer-Related Crime Act B.E. 2550 (2007), amended in 2017, addresses electronic surveillance and interception in the digital realm.

Section 8 of the Act criminalizes anyone who illegally intercepts computer data being transmitted through a computer system that is not intended for public access. The penalty is imprisonment of up to three years, a fine of up to THB 60,000, or both.

The 2017 amendments expanded investigatory powers, allowing authorities to use the Act's provisions for any criminal offense that involves computer systems. Service providers may be required to retain user data for up to two years, and authorities can access traffic data without a court order to assist investigations.

Section 18 of the amended Act has been interpreted broadly. While it does not explicitly reference "interception," legal analysts have noted it may encompass direct interception of communications, compelled interception assistance from service providers, and direct access to network operators' systems.

For individuals, the Computer Crime Act means that intercepting digital communications, recording VoIP calls without authorization, or accessing someone's electronic messages without permission can result in criminal prosecution.

Recording Phone Calls in Thailand

Thailand does not have a specific statute that addresses the legality of recording phone calls between private parties. There is no "one-party consent" or "two-party consent" framework like those found in the United States or Australia.

Instead, the legality of recording a phone call depends on a combination of factors:

• Are you a participant? Recording a call you are part of is less likely to create criminal liability than intercepting a call between two other people.
• What is the purpose? Recording for self-protection or to preserve evidence of a legal claim carries more weight than recording for gossip or harassment.
• Is the call private? Section 36 of the Constitution protects communication secrecy, which applies to private phone calls.
• Will you share the recording? Disclosing a recording may trigger PDPA liability or Criminal Code Section 323 liability if professional secrets are involved.

The safest approach for phone calls in Thailand is to inform the other party that the call is being recorded. This satisfies PDPA consent requirements and reduces the risk of criminal or civil liability.

Recording In-Person Conversations

The same legal ambiguity that applies to phone calls extends to in-person conversations. Thailand has no law that explicitly permits or prohibits recording a face-to-face conversation.

Recording a conversation you participate in is generally less risky than recording someone else's conversation. But "less risky" is not the same as "legal." If the recording takes place in a private setting, such as someone's home, a doctor's office, or a confidential business meeting, the recorder may face liability under:

• Section 32 of the Constitution (privacy violation)
• Criminal Code Sections 322 through 325 (disclosure of secrets, if shared)
• The PDPA (collection of personal data without consent)
• Civil and Commercial Code Section 420 (tort liability for unlawful injury to another's rights)

Recording a conversation in a semi-public setting, such as a restaurant or coffee shop, is less likely to create liability, but it is not risk-free. The key question is whether the other party had a reasonable expectation that the conversation was private.

Recording in Public Spaces

Recording in genuinely public spaces, such as streets, parks, and markets, is generally permissible in Thailand. The expectation of privacy is lower in public, and CCTV cameras are widespread throughout Bangkok and other major cities.

The PDPA includes an exception for recordings made for crime prevention and public safety purposes. Security cameras installed in public areas do not require individual consent, though operators should post notices where practicable.

However, recording individuals in public can still create legal issues in certain circumstances:

• Harassment: Repeatedly filming a specific person against their will could constitute harassment.
• Defamation: Publishing a recording that harms someone's reputation could trigger Thailand's criminal defamation laws, which are actively enforced.
• Commercial use: Using someone's image or voice for commercial purposes without consent violates the PDPA.

The Royal Thai Police issued guidance when the PDPA took effect, noting that dashcam footage and security camera recordings for personal safety purposes are generally acceptable, but sharing such footage publicly or on social media without justification could create liability.

Workplace Recording and Employer Surveillance

Thailand does not have specific legislation governing workplace surveillance in the way that some European countries do. Employer monitoring practices fall under the PDPA and general labor law principles.

Employers who install CCTV in the workplace must:

• Notify employees that surveillance is in place.
• State the purpose of the surveillance (e.g., security, safety compliance, theft prevention).
• Limit the scope to areas where employees do not have a strong expectation of privacy. Cameras in restrooms, changing rooms, or prayer rooms are prohibited.
• Comply with the PDPA by treating surveillance footage as personal data, including storage limitations and access controls.

Employees who secretly record conversations with colleagues or supervisors face the same legal uncertainty that applies to all private recordings in Thailand. A recording made to document workplace harassment or illegal activity may be viewed more favorably by courts than one made without a clear purpose. But there is no guarantee of admissibility.

Business Compliance and Call Recording

Businesses operating in Thailand that record customer calls, meetings, or transactions must comply with the PDPA's consent and notification requirements. This includes:

• Prior notification: Customers must be told at the start of a call that it will be recorded.
• Stated purpose: The business must explain why the recording is being made (quality assurance, dispute resolution, training, etc.).
• Consent mechanism: Under the PDPA, consent must be explicit. A recorded announcement that "this call may be recorded for quality purposes" followed by the customer continuing the call may be sufficient, but best practice is to offer an opt-out.
• Data retention limits: Recordings should not be kept longer than necessary for their stated purpose.
• Access rights: Customers have the right to request access to their recordings, request correction, or request deletion under the PDPA.

Businesses that fail to comply face the full range of PDPA penalties, including administrative fines of up to THB 5 million and potential criminal prosecution.

Law Enforcement Wiretapping and Interception

Law enforcement agencies in Thailand can intercept communications, but only with judicial authorization. The Special Case Investigation Act allows Special Case Inquiry Officials to request wiretapping authorization from the Chief Judge of the Criminal Court.

The requirements for authorization are:

• Reasonable grounds to believe the target has committed or will commit a crime.
• The interception must relate to a serious offense.
• No other appropriate method of investigation is available.
• The authorization is valid for a maximum of 90 days.

The Telecommunications Business Act B.E. 2544 (2001) prohibits the illegal interception, use, or disclosure of messages and information transmitted through telecommunications systems. Service providers can be compelled to assist with lawful interception but cannot conduct surveillance independently.

Thailand's approach to law enforcement interception has drawn criticism from Privacy International and other organizations, which have noted that oversight mechanisms are limited and that the 2017 amendments to the Computer Crime Act expanded government surveillance powers without adequate safeguards.

Practical Guidance for Recording in Thailand

Scenario	Risk Level	Key Considerations
Recording your own phone call (you are a participant)	Moderate	No explicit law prohibits it, but PDPA consent is technically required; civil courts may accept the recording
Recording someone else's phone call	High	Violates Section 36 of the Constitution and potentially the Computer Crime Act
Recording an in-person conversation you are part of	Moderate	Depends on setting and purpose; private settings carry higher risk
Recording in public spaces	Low	Generally acceptable, but sharing recordings on social media can create liability
Employer CCTV in the workplace	Low to Moderate	Must comply with PDPA notification and purpose limitation; no cameras in private areas
Business call recording with customer notification	Low	Must provide clear notice and comply with PDPA consent requirements
Recording to document a crime or protect legal rights	Lower risk	Courts are more sympathetic, and Section 226/1 may allow admission of the evidence

For anyone uncertain about the legality of a specific recording, consulting a Thai attorney before proceeding is strongly advisable. The absence of a clear recording statute means that outcomes depend heavily on judicial interpretation, which varies.

Conclusion

Thailand's recording laws reflect a legal system that has not yet consolidated its approach to modern surveillance technology. The constitutional protections are strong on paper. The Criminal Code addresses the disclosure of secrets. The Criminal Procedure Code controls what evidence courts will accept. The PDPA introduces consent requirements with real teeth. And the Computer Crime Act covers electronic interception.

But none of these laws was written specifically to answer the question: "Can I record this conversation?" The result is a framework where legality depends on context, and where the same recording can have different legal consequences depending on which court examines it and for what purpose.

For individuals, the practical advice is straightforward. Get consent when possible. Understand that secretly recorded evidence faces a steep uphill battle in criminal court but may survive in civil proceedings. And recognize that Thailand's enforcement of privacy and data protection laws is intensifying, not relaxing.

For businesses, PDPA compliance is not optional. The era of minimal enforcement has ended, and companies that record calls, operate CCTV, or collect customer data without proper consent frameworks are exposed to significant financial and criminal liability.