With regard to the update on sub-regulations under the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”), the Personal Data Protection Committee (the “PDPC”) has thus far issued five Notifications under the PDPA, as follows:
- Notification of the PDPC Re: Exemption from Duty to Record Activities for Data Controller deemed Small Business B.E. 2565 (2022);
- Notification of the PDPC Re: Criteria and Methods for Preparing and Retaining Records of Personal Data Processing Activities for Data Processor B.E. 2565 (2022);
- Notification of the PDPC Re: Security Measures of Data Controller B.E. 2565 (2022);
- Notification of the PDPC Re: Criteria for Consideration to Issue an Order to Impose the Administrative Fine of the Expert Committee B.E. 2565 (2022); and
- Notification of the PDPC Re: Prohibited Qualifications and Characteristics, Term of the Position, Retirement from the…
