The much needed Personal Data Protection Act -- which has been delayed for two years -- will be mandated by June. It's part of the government's pledge to boost cyber security in Thailand but a large theft of data from the Thai University Central Admission System (TCAS) earlier this month has done little to inspire confidence that authorities will actually get on top of this growing threat anytime soon.