Privacy rights involving the collection, storage and usage of personal data have only been partially protected under a variety of context-specific privacy laws, such as the Official Information Act BE 2540, Credit Information Business Act BE 2551 and the Telecommunication Business Act BE 2544. Various drafts of personal data protection legislation have been circulated over the past few years, with the intention of filling the gap not covered by existing laws. The Personal Information Bill (PIB) currently being considered by the Thai legislature represents the most progress to date, although it is not without its weaknesses as discussed here. We will continue to monitor developments of the PIB and other personal data protection legislation.