Data protection law delay to go before cabinet

Data protection law delay to go before cabinet

The Personal Data Protection Act is scheduled to be enforced from May 27 but most sections are expected to be delayed. (Bangkok Post photo)
The Personal Data Protection Act is scheduled to be enforced from May 27 but most sections are expected to be delayed. (Bangkok Post photo)

A royal decree drafted to postpone the enforcement of most sections in the Personal Data Protection Act (PDPA) by a year will be tabled before the cabinet for approval next week, says the Digital Economy and Society (DES) Ministry.

The PDPA was published in the Royal Gazette in May last year, but was scheduled to come into force on May 27 after a one-year grace period.

Once implemented, the PDPA is expected to change the landscape of personal data protection in Thailand. The legislation mandates that data controllers and processors who use personal data must receive consent from the data's owners and use it only for expressed purposes.

Putchapong Nodthaisong, deputy permanent secretary for DES, said the ministry will ask the cabinet on Tuesday to approve the decree.

The legislation will defer almost all the chapters in the PDPA act by one year, except for chapters 1 and 4, which involve the appointment of the members sitting in the Personal Data Protection Committee and the establishment of the Office of the Personal Data Protection Committee. 

The drafted decree is under consideration by the Office of the Council of State.

The deferral would ward off complaints, especially among small and medium-sized enterprises that might not be prepared for the legislation, he said. Major enterprises, telecom and SET-listed companies are mostly aware of the law.

According to Mr Putchapong, the DES has appointed members for the PDPA Committee, but still requires cabinet approval.

“We hope to see the first meeting of the PDPA committee by this June,” he said.

The committee will have to set up a sub-panel to iron out related standards and other regulations, expected to be wrapped up one year after the PDPA committee is formed.

“The DES Ministry also intends to carry out public hearings on matters pertaining to the regulations,” said Mr Putchapong.

Paiboon Amonpinyokeat, legal expert and founder of P&P law firm, said businesses still need to get ready for three important issues regardless of the delay.

First, consent platforms where firms can inform data owners about the purpose of the usage of their data and get consent need to be set up, he said.

Second, businesses need to appoint data protection officers and adjust their organisational structure by gathering a team of IT, legal and human resources to cope with the PDPA.

Third, they need to prepare a notice to inform data owners how they used their data prior to the enforcement of the PDPA.  

The government needs to urgently iron out related regulations to serve as guidelines for businesses to comply with, Mr Paiboon said.


Do you like the content of this article?
COMMENT (3)

Mass testing ordered at all Korat markets

NAKHON RATCHASIMA: Mass Covid testing has been ordered at all markets in this northeastern province after infections liked to a major wholesale farm market jumped to over 400.

11:05

Prawit insists ties with Prayut, Anupong remain solid

Deputy Prime Minister Prawit Wongsuwon has affirmed that his ties with Prime Minister Prayut Chan-o-cha and Interior Minister Anupong Paojinda are still solid and unbreakable.

11:00

Evergrande signs deal to avoid default on key bond

BEIJING: Embattled Chinese housing giant Evergrande said on Wednesday it had made a deal with domestic bondholders that should allow the conglomerate to avoid default on one of its interest payments.

10:45