The Personal Data Protection Act, B.E. 2562 (2019) ("PDPA") has been published in the Government Gazette on 27 May 2019. 2

Companies have a one year period to become fully compliant.

A few key points:

▪              This Act will affect all business sectors, such as telecommunications, healthcare, banking and credit reporting

▪              Both civil and criminal penalties can be imposed on the data controller for violation of the provisions of the Draft Act.

▪              Personal Data Controller shall be entitled to collect, use or disclose personal data with the consent of Personal Data Owner

▪              Any consent shall be made in written or electronically

▪              Personal Data Owner shall be entitled to withdraw the consent at any time.

The PDPA Penalties & fines

Up to 5,000,000 THB and imprisonment up to 1 year.

A free audit consultation

by ADD is offered to help you understand the meanings and consequences of such laws, and how to implement compliance processes in your company.

The Personal Data Protection Act, B.E. 2562 (2019) ("PDPA") has been published in the Government Gazette on 27 May 2019. 3

You May Also Like

data breach cost in 2022
5 trend privacy personal data
E-Waste management
Secure Data Erasure: How To Permanently Delete Data Without Recovery? Is Factory Reset Really Work and Safe? 1
ITAD