The Notification of the Personal Data Protection Committee re: Designation of a Data Protection Officer under Section 41 (2) of the Personal Data Protection Act B.E. 2562 (2019) B.E. 2566 (2023) (“PDPC Notification re: DPO Designation”) has been published in the Government Gazette on 14 September 2023. This notification will be effective from 13 December 2023. While most of the requirements under the PDPC Notification re: DPO Designation remain unchanged from its draft version, the published version specifies a minimum number of data subjects that would trigger the large-scale criteria and the data controller’s obligation to designate a data protection officer.