Yes, VPN use is legal in Thailand for privacy or accessing geo-blocked content, but violates laws when used to bypass censorship or commit cybercrimes. The 2022 Cybersecurity Act and Computer Crime Act (CCA) empower the Ministry of Digital Economy and Society (DE) to monitor traffic, while the 2026 draft Cybersecurity Act expands surveillance powers. Commercial VPNs operate openly, yet authorities prosecute misuse under Section 14(3) CCA (circumventing content restrictions) or Section 18 CCA (illegal data access).
Key Regulations for Using a VPN in Thailand
- Bypassing Censorship Prohibited: Under Section 14(3) of the Computer Crime Act (CCA), using a VPN to access blocked content (e.g., gambling sites, political dissent) constitutes an offense punishable by up to 5 years imprisonment and fines up to THB 100,000.
- Data Retention & Monitoring: The 2026 Cybersecurity Act grants the DE and Thai Cybersecurity Agency (CSA) authority to demand VPN provider logs, including user identities, under national security pretexts. Non-compliance risks license revocation.
- Commercial VPNs Face Scrutiny: Providers must register with the DE and adhere to Thailand’s 2023 Data Protection Act (PDPA), requiring user data localization. Unregistered VPNs risk Section 18 CCA charges for facilitating illegal activities.
Enforcement Trends: Authorities prioritize VPNs linked to online gambling, fraud, or lèse-majesté cases, with 2024 crackdowns targeting foreign-owned services. While personal use for privacy remains tolerated, corporate or circumvention-focused VPNs face heightened legal risk under evolving 2026 compliance frameworks.