Nouvelles
Thailand Approves Draft PDPA Exemptions
15/08/2022
In July 2022, the Thai cabinet approved in principle a Royal Decree which set out some PDPA exemptions. These exemptions will be available for certain groups of people, businesses and other entities.
However, these exemptions are only applicable to specific parts of the PDPA and not the whole act.
Points clés
- PDPA exemptions will be made available to certain businesses, entities and groups of people.
- These exemptions will apply to specific parts of the PDPA only and will not cover the whole act.
- The exemptions will be available for the following groups:
- Data controllers who work on behalf of the government in relation to national security, taxation, risk mitigation & surveillance.
- Government organizations who process data for the following reasons; to uphold public interest and/or adherence to international treaties.
- Those who process personal data for domestic or international court proceedings.
What part of the PDPA is subject to these new exemptions?
The draft Royal Decree would exempt certain business operators and activities from the requirements of the following PDPA chapters:
- Chapter II: Personal Data Protection – Consent, notification, cross-border transfer of the personal data requirements, etc.
- Chapter III: Rights of the Data Subject – Requirements and criteria on data subject rights.
- Chapter V: Complaints – Requirements on the submission of complaints to the Office of the Personal Data Protection Commission.
- Chapter VI: Civil Liability – Conditions in relation to the civil liability of a data controller or data processor.
- Chapter VII: Penalties – Administrative and criminal penalties.
When can the PDPA exemptions be used?
The proposed PDPA exemptions would apply to the following three main categories of business operators and activities:
1. Data controllers who are acting in relation to government requests for the following purposes:
State security and public safety
Exempted operations include activities where the objective is to promote and safeguard state security, intelligence, and information relating to national security, as well as efforts to maintain fiscal and economic security and public security.
The prevention and suppression of certain criminal activities, such as money laundering, drug trafficking, transnational threats and terrorism, transnational crime, and human trafficking; activities to promote anticorruption or cybersecurity efforts; and actions relating to public health, sanitation to prevent epidemics, and protection of public life, health, and property are also exempt from the PDPA.
Taxation
Exempted activities in relation to taxation include; tax collection that falls under the responsibility of the Revenue Department, Customs Department, or Excise Department. This also applies to any actions relating to the enforcement of taxation fees or duties, and actions related to social security, the performance of obligations, or international cooperation.
Risk mitigation, monitoring, and surveillance
Examples of eligible activities include; monitoring and providing measures to mitigate remedial damage caused by threats to national security.
Eligible actions must be undertaken by competent officials and government agencies in full adhereance to the law. Furthermore, such actions must have been taken in order to prevent public disasters or threats which may affect the public.
2. Processing of personal data for government organizations for either of the following; public interest or compliance with international treaties and agreements.
3. Processing of personal data for domestic or international court proceedings (e.g., by judges, public prosecutors, inquiry officials, legal professionals, government organizations, or other relevant officials).
Comment Belaws peut-il vous aider ?
If you need more information about the PDPA and how it may affect your business and the best ways to ensure full compliance, why not prendre rendez-vous avec nos experts.
Veuillez noter que cet article est fourni à titre d'information seulement et ne constitue pas un avis juridique.
Nos consultations durent jusqu'à une heure et sont menées par des juristes experts qui parlent couramment l'anglais, le français et le thaï.
Les consultations peuvent être organisées sur WhatsApp ou sur le Logiciel de Vidéoconférence de votre convenance. Une consultation avec l’un de nos experts juridiques est sans aucun doute le meilleur moyen d’obtenir toutes les informations dont vous avez besoin et de répondre à toutes les questions que vous pourriez avoir sur votre nouvelle entreprise ou votre projet.
150 USD
Jusqu'à 1 heure
Paiement en ligne (Paypal ou carte bancaire)
Les consultations juridiques peuvent être menées en anglais, en français ou en thaï.
Les consultations juridiques sont assurées par des des avocats expérimentés dans les domaines concernés.