PDPA guest consent for Thai hotels — practical playbook

Four years after the PDPA became fully enforceable, most Thai hotels have adopted a version of a consent form at check-in. The problem is that many of those forms bundle four or five distinct processing purposes into a single tick-box, which is precisely the pattern the PDPC has been penalising in its 2025 enforcement actions.

The six purposes worth capturing separately

1. Booking fulfilment — performance of contract, no consent required, but the guest should be informed.
2. F&B preferences — legitimate interest with an opt-out available.
3. Marketing communications — consent, granular, withdrawable.
4. Loyalty programme enrolment — consent, separate from marketing.
5. Third-party sharing with OTAs — legitimate interest, subject to a documented balancing test.
6. Long-term retention beyond the statutory Hotel Act requirement — consent.

What the PDPC checks

Based on the 2024–2025 audit patterns, the PDPC checks (a) that each purpose has a distinct tick-box, (b) that consent is timestamped and stored with the audit trail, (c) that the withdrawal path is as easy as the initial consent, (d) that any Thai national ID number captured has an explicit legal basis and a documented retention period. Bundled consents and paper forms kept in a cabinet without an audit trail are the two most common findings.

How the PDPA Guest Consent module handles it

The module integrates with your HotelMinder workspace via the official API. It captures each of the six purposes separately, timestamps them with the guest signature or e-signature, and stores an immutable audit trail in Thailand-resident storage. A monthly compliance report — signed by a Bangkok-based DPO registered with the PDPC — is delivered to your inbox and to your legal counsel on request. It works alongside HotelMinder without replacing your existing guest profile records.

If your property has not yet performed a PDPA gap assessment, our Bangkok compliance advisory can produce one within 10 working days for THB 34,900. Contact compliance@thaihotelminder.org.