Key Considerations under Personal Data Protection Act of Thailand Across the Asia-Pacific region, the automotive industry is transforming automobiles into sophisticated data collection platforms. These platforms can gather/collect everything from location information and driving patterns to biometric data and personal preferences. In Thailand, the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) provides the legal… Read More
The PDPC Notification on Exemptions of Recording for Small and Medium-sized Business Data Controllers 26th December 2024 (Notification for DC) and the PDPC Notification on Exemptions of Preparing and Maintaining Records of Personal Data Processing Activities for Small and Medium-sized Business Data Processors 26th December 2024 (Notification for DP) were published in the Royal Gazette… Read More
The Personal Data Protection Committee (PDPC) proposed drafts of two Notifications regarding ROPA under the Personal Data Protection Act B.E. 2562 (PDPA) for public hearings from 31st October 2024 to 14th November 2024. The PDPC may soon issue these Notifications and publish them in the Royal Gazette for 90 days before they come into force…. Read More
The Expert Committee (EC) of the Personal Data Protection Committee (PDPC) imposed a THB7,000,000 (around USD212,000) administrative fine on a data controller company on 31 July 2024. It was the first ever fine for personal data breach in enforcement of the Personal Data Protection Act B.E. 2562 (A.D. 2019) (PDPA). The EC investigated the data… Read More
The Personal Data Protection Committee (PDPC) of Thailand has issued the PDPC Notification on Criteria for Deletion, Destruction or Anonymization of Personal Data B.E. 2567 (2024) dated 31st July 2024 (“Notification”). The Notification was published in the Royal Gazette on 13th August 2024. It will become effective on and from 11th November 2024. We summarized… Read More
2022年6月29日，个人数据保护委员会（PDPC）发布了关于投诉的提交、拒绝、终止、审议和审议期限的通知B.E.2565。该通知于2022年7月11日在政府公报上发布，并于2022月12日生效。我们总结了该通知的一些关键规定如下： (1) 资料当事人可以通过邮寄、电子方式或PDPC办事处规定的任何其他方式向PDPC办事处提出实际投诉。投诉必须清晰、易于理解、有礼貌，并且不具有直接或间接威胁的性质。投诉书所规定的最少详细资料，包括投诉人的姓名和地址，以及涉嫌罪行的事实和有关资料(即违反或不遵守PDPA或PDPA 规则)。 (2) 如投诉包含所有所需的详细资料，PDPA主管官员将将在收到投诉后15天内发出正式收据，并将收据交给资料当事人，然后在15天内审查和分析投诉的详细资料，并将投诉提交给专家委员会（EC），供PDPC秘书长审议。为审查和分析投诉，主管官员有权命令所有或任何有关各方提交与所指控犯罪有关的补充信息、文件和材料。 (3) 如果投诉不具备所有所需的详细资料，或者如果投诉涉及的当事人、事实和问题与之前提交给EC并由EC最终确定的另一投诉所涉及的犯罪理由相同，则EC可以拒绝或终止投诉，或者如果投诉不是数据控制员或数据处理员或其雇员或承包商违反PDPA或PDPA规则的情况，或者投诉是毫无根据的。 (4) 如果 EC审议了投诉并发现该案件可以通过调解解决，而且双方希望通过调解解决该案件，EC可以对该案件进行调解。如果双方无法解决案件，EC会应进一步考虑投诉，并有权命令有关各方在EC 认为有必要时提交额外的信息和文件。 (5) 如果 EC发现投诉有根据，并且有明确证据证明数据控制员或数据处理员或其雇员或承包商犯下了被指称的罪行，EC会应根据《PDPA》第90条对其处以行政罚款。 To see the archive of our past newsletters and articles please click here.
