PDPA is the Personal Data Protection Act B.E. 2562 that is an acronym for Personal Data Protection Act. And must obtain consent from the owner of the data before collecting, using, disclosing and transferring the data. The data subject must be free to choose, be specific, and be able to withdraw their consent at any time.
which the PDPA provides protection Personal data is divided into two forms:
- Personal Data includes name-surname, identification number, address, telephone number, date of birth, e-mail address, education, gender, occupation, photograph, financial information. *Not counted as personal information if deceased
- Sensitive Personal Data, including medical or health information Genetic and identity information, race, political opinions religious beliefs sexual behavior Criminal records and union information
When does the law come into effect
PDPA (Personal Data Protection Act) deals with individuals to whom personal data is addressed. Persons with decision-making powers for Georgia Email Lists collection, use and disclosure, including those from whom personal data will be processed. We will divide those people out as follows.
- Data Subject (Data Subject) is the person who owns and identifies them, such as customers, employees, patients.
- The data controller (Data Controller) is a natural person or a juristic person. Which has the authority to make decisions about the collection, use and disclosure of personal information, such as business owners.
- A data processor (Data Processor) is a person or a legal entity. which operates on the collection, use or disclosure of personal data “According to the instructions or on behalf of the data controller”, the person or juristic person who performs such Must not be a controller of personal data such as employees, marketers, data analysts.
Who does the law have to do with it
Penalties for non-compliance with the PDPA, according to the law, there are 3 types of penalties:
- Civil penalty based on actual CH Leads damage and may have to pay more compensation with a maximum not exceeding 2 times of the actual damages
- Criminal penalties: imprisonment for a maximum of 1 year or a fine of not more than 1 million baht, or both.
- Administrative penalties: a maximum fine of not more than 5 million baht.