The Department of Provincial Administration (DOPA) has revoked the People’s Party’s access to key identity verification systems after reports of a leak involving citizens’ personal data. The order, issued by the Registration Administration Bureau under DOPA, took effect at 12.00pm on 14 March 2026. Get today's headlines by email The decision immediately cancels the party’s ability to use the DOPA-Digital ID verification system and the Smart Card reader programme used to access data from Thailand’s national ID cards. Authorities said the move was made to protect citizens’ personal information and ensure compliance with relevant laws governing data protection and civil registration. The announcement was made on 15 March 2026 following reports that the People’s Party had detected attempts by an external party to gain unauthorised access to its membership database. Officials said the action was intended to ensure public understanding of the situation and to maintain confidence in the security of personal data systems. According to the bureau, the party has been instructed to submit details about the suspected data breach to authorities. The department said it would also review how personal data is connected and shared between organisations, while emphasising the importance of complying with the Personal Data Protection Act and civil registration laws. Authorities warned that using citizens’ ID card data without consent, beyond legal purposes, or without proper security measures could violate multiple laws. These include the Civil Registration Act, the National ID Card Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and legislation governing elections and political parties. If wrongdoing is confirmed, the Central Registration Office may file complaints with investigators or pursue administrative penalties against those responsible. Violations could include unlawful disclosure of civil registration records, unauthorised access to information stored on national ID cards, or misuse of personal data for political activities such as party membership. The bureau also outlined legal rights available to citizens whose ID card information may have been misused. Individuals who suffer financial or other damage from fraudulent use of their data may file criminal complaints for offences including fraud under Section 341 of the Criminal Code, which carries penalties of up to three years in prison or a fine of up to 60,000 baht. Other potential charges include document-related offences under Sections 264–268 of the Criminal Code, with penalties of up to 10 years’ imprisonment and fines of up to 200,000 baht. Violations of the Computer Crime Act for importing false or forged information into a computer system can carry penalties of up to five years in prison or a fine of up to 100,000 baht. Citizens may also file complaints with the Personal Data Protection Committee Office, which has authority to investigate violations and consider compensation claims. Authorities emphasised that any determination of wrongdoing would depend on evidence gathered during investigations. Officials said citizens concerned that their ID card information may have been compromised can request a replacement card at their local district office. The new card will carry a different Laser ID number on the back while retaining the same 13-digit national identification number, with a replacement fee of 100 baht. SiamRath reported that investigations into the suspected data leak are continuing and authorities said legal action may follow depending on the findings. Join the discussion? Already a member? Adapted by ASEAN Now Siamrath 16 Mar 2026
View full article
