On 21 June 2022, just a few weeks after Thailand’s Personal Data Protection Act (“PDPA”) came into full force, the Data Protection Committee published four announcements in the Royal Gazette about the PDPA. These announcements provide more detail about the PDPA and are intended to provide holders of personal data with more information about their duties and responsibilities under the PDPA. The four announcements concern:
- Relaxation of the data record requirements of the Data Protection Officer for small-to-medium size enterprises or SMEs.
- Terms and measures for making and keeping of the personal data record for data protection officers.
- Security measures for data protection officers.
- Measures to impose administrative fines or penalties by the specialized committee.
The announcements are effective as of 21 June 2022. Business operators should familiarize themselves with contents of these announcements to help ensure compliance with the PDPA.
Nat Uawithya and Douglas Mancill (24 June 2022)