Samata Masagee

Thailand: PDPC’s Clarification on Personal Data Breach Notification

By Chutikarn Boonnark & Samata Masagee on February 3, 2025

Posted in Cyber security, Data security and breaches

Since the full implementation of Thailand’s Personal Data Protection Act (PDPA) in June 2022, the Personal Data Protection Committee (PDPC) has been instrumental in shaping the nation’s data protection framework. Recently, the PDPC provided detailed clarifications on data breach notification requirements by responding to the public consultation, offering essential guidance for…

THAILAND: First PDPA Enforcement in Thailand: A Landmark Case

By Samata Masagee & Chutikarn Boonnark on August 27, 2024

Posted in General Data Protection Regulation, Privacy Law

On August 21, 2024, the second expert committee appointed under the Thai Personal Data Protection Act (PDPA) of 2019, issued an administrative fine to a major private company involved in online sales. The company allowed a significant amount of personal data to leak to call center gangs without implementing adequate security measures as required by…