On Wednesday, 21 August 2024, the Personal Data Protection Committee (PDPC) of Thailand announced its first administrative penalty since the full implementation of the Personal Data Protection Act B.E. 2562 (2019) in Thailand in 2022. The penalty was imposed on a major online shopping platform, the name of which was not disclosed.
The data controller was fined for failing to comply with its obligations under the PDPA for:
- Failure to designate a data protection officer (DPO):
- Failure to provide adequate security measures:
- Failure to comply with data breach protocol:
Read the full details below:
https://www.nishimura.com/en/knowledge/publications/personal-data-protection-update