What is PDPA? How does it relate to us?

PDPA, which stands for Personal Data Protection Act B.E. 2019 (2019), this law provides rights to personal data subjects and establishes standards for keeping personal data safe.

and use it only for the purposes that the owner of the personal data authorizes. The law PDPA Thailand (Personal Data Protection Act) was announced in the Government Gazette on May 27, 2019, and is effective on June 1, 2022.

Nowadays, digital or online networking has become part of our daily lives. There are many platforms to choose from to communicate to meet our demands. In each channel that we use, our personal information will be collected before we enter, such as name, surname, email, phone number, address, or other personal information as each platform requests information.

Or when we provide personal information, we will first consider who and why. For example, if we are ordering online, we agree to provide personal information (name, surname, address, and telephone number) so that the company can use this information to send the product to us or personal information that we provide to the company to apply for work.

How do we know that the information we have consented to will be used for its intended purpose and not to use our personal information for any other purpose?

When will the PDPA be effective?

PDPA will come into effect on June 1, 2022. It is a law that all of us should know and be aware of our rights to personal data, especially organizations, companies, stores, or platforms where personal data is collected. Whether it is a customer, user, or an employee working within the organization itself,

Organizations have been affected quite a bit by the announcement of PDPA to increase the privacy policy standard and to use it for purposes according to the consent of the personal data subject. And most importantly, it must be PDPA compliant. Making the PDPA process is difficult, and we cannot complete it in a short period of time. Especially large organizations that collect and use a lot of personal information.

However, individuals or organizations still have time to begin processing personal data to comply with the PDPA within the remaining year. It was postponed to come into force on June 1, 2022 (article written in 2021) because this law will certainly apply to those involved in personal data. Therefore, it should be done early to prevent problems that may follow the law.

which will have a detrimental effect. If there is a leak of information or someone accidentally misuses personal information, individuals or organizations that are not pursuing the PDPA will suffer more damage than those who have already taken action. And those who are subject to legal penalties may be the owners of the business instead of employees Therefore, it is considered that organization leaders should be aware of and pay great attention to the implementation of PDPA before the enforcement date.

Credit : T-reg