Act on Computer Crime, unauthorized access and interception
Act on Computer Crime B.E. 2550 (2007), Sections 5 to 8
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not access a Thai computer system or computer data protected by a security measure not intended for your use.
- Do not disclose another person's security measures, or intercept another person's computer data by electronic or any other means, in a manner likely to cause injury or that is not for public benefit.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 5 (unauthorized access to a protected computer system) carries imprisonment not exceeding six months or a fine not exceeding Baht 10,000, or both. Section 6 (illegal disclosure of another's security measures) carries imprisonment not exceeding one year or a fine not exceeding Baht 20,000, or both. Section 7 (unauthorized access to protected computer data) carries imprisonment not exceeding two years or a fine not exceeding Baht 40,000, or both. Section 8 (illegal interception of computer data) carries imprisonment not exceeding three years or a fine not exceeding Baht 60,000, or both, the highest of the four tiers.
Penalty structure
Four separate fine tiers rather than one uniform cap: Section 5 (unauthorized access to a computer system) caps at Baht 10,000; Section 6 (illegal disclosure of security measures) at Baht 20,000; Section 7 (unauthorized access to computer data) at Baht 40,000; Section 8 (illegal interception of computer data) at Baht 60,000, the highest tier and the recorded cap. Each section also carries a term of imprisonment as an alternative or additional penalty, recorded in criminal_exposure_note.
- Rule
- Fixed only
- As of
- 6 September 2026
- Currency
- THB
- Fixed cap
- 60,000
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 5 punishes illegally accessing a computer system that has specific security measures not intended for the accessor's use. Section 7 punishes the same act against computer data.
Section 6 punishes knowing another person's security measures and illegally disclosing them in a manner likely to cause injury, and Section 8 punishes illegally intercepting, by electronic or any other means, computer data of another person transmitting in a computer system where that data is not for public benefit or available to others.
The Act's own Section 2 sets commencement at thirty days after publication in the Government Gazette, but the International Commission of Jurists' translation of the Act's original 2007 text does not itself state that publication date.
When LexLint raises it
crawls_webtrains_models