PDPA Thailand
Thailand’s Personal Data Protection Act BE 2562 (PDPA) became fully effective on June 1, 2022, bringing significant changes to the current privacy legal environment in Thailand. This creates challenges for organisations doing business in Thailand both before and after the deadline.
What does this mean for Your company, having and running a website?
Running your own website, You need to be sure that you comply with the PDPA Thailand’s law. Otherwise you risk paying a fine, if there is an issue against the personal data protection act.
There are different steps and concerns You need to think of. As Samui Infotech isn’t a law-firm, and we only can advise You what needs to get done, but in fact, we aren’t able to cover all details – only the concern about the website.
Note: Please remember, Samui Infotech isn’t a law-firm. We aren’t able to cover all the law issues You should fulfil – nor we won’t like to get involved in any law issues between Your clients and Your company! And we don’t want to get involved in a lawsuit either.
10 Steps to Thailand PDPA Compliance
- Add or update the privacy policy to disclose how you deal with personal data.
- Get consent from users before collecting their personal data.
- Data collected must be limited to what is required for the purpose for which it is being collected.
- Let users opt out of your organisation collecting, using, or disclosing their personal data.
- Users must be able to revoke their consent at any time they want.
- Keep the personal data that you hold accurate and relevant to the purpose.
- In case of international data transfer, the recipient country/organisation must have a governing privacy law or standards equivalent to the PDPA.
- Users must be able to exercise their rights easily.
- Keep the personal data protected against the breach or any kind of misuse, and be prepared with possible preventive measures.
- Appoint a DPO if your organisation collects large volumes of personal data or works with sensitive personal data.
However, what kind of steps You as a company need to do, contact Your lawyer or a law firm. They should be able to help You with those steps.
What can Samui Infotech help You?
Samui Infotech has a website package, where we cover the consent for the data collection and cookie consent (cookie banner plus more settings).
What does this package covers:
- Install Privacy Suite for WordPress
- Setup all necessaries
The costs including this package are THB 3000. This includes one year support for the plugin, plus our work.
Let us know if You are interested in having Your website PDPA Thailand & GDPR compliant.
