PDPA – Thailand

Thailand has a new law on personal data collection was effective from 1 June 2022 is related to usage and rights of the person sharing data with the companies for various purposes. It is equivalent to European GDPR (General Data Protection Regulation). For example, if you are owner of a website and collecting personal data from the user of your website, you must follow the PDPA guidelines to use the shared data, give access to the owner of the data, delete the data if not in use anymore, withdraw/ remove the data from the database on demand from the user who shared the data etc. Most of the recruitment companies collect personal and sensitive data for the purpose of offering jobs from candidates. Candidates sharing data may demand to access the data they have shared at any time, may request to remove the data from the database of the company etc. The company that is collecting the data for whatever purpose must declare that the data is not being shared with third party for any other purpose and follow the PDPA guidelines all the time failing which punishment is also defined by the Government.