The government has set up a data governance committee for its antiviral contact-tracing Thai Chana platform to ensure data privacy protection and boost public confidence in using it.
The web-based platform was rolled out on May 17, the first day department stores were allowed to reopen after more than a month closed during the coronavirus outbreak.
Through the platform, shops can create QR codes for people to scan when they check in and out so as to trace those who may be at risk of contracting the coronavirus.
The nine members of the committee were appointed last Friday. They are tasked with providing personal data management consultation to organisations managing the Thai Chana platform.
The panel is also responsible for overseeing and following up the data handling of Thai Chana, to ensure it is done effectively, in line with government data governance standards and in compliance with the Personal Data Protection Act and other laws.
Putchapong Nodthaisong, deputy permanent secretary for the Digital Economy and Society Ministry, the committee chair, said the panel will hold the first meeting soon.
Prinya Hom-anek, a cybersecurity expert who also sits on the committee, said Thai Chana relies on users' honesty and does not require authentication or personal data.
He said no system is impermeable to attacks, but the platform's development team must detect any assaults as soon as possible.
Thailand Computer Emergency Response Team (ThaiCert) has warned the public about fake Thai Chana websites embedded with malware that can steal users' personal data. Android users were indicated to be vulnerable to attacks.
Hackers have sent SMSs to users, asking them to click links to disguised Thai Chana websites, including thaichana.asia, thai-chana.asia and thaichana.pro.
Once clicked, these malicious websites enable the download of .apk files for installation. ThaiCert confirmed the files contain malware that can steal financial data from users. The malware can gain access to user data, such as phone calls, SMS and voice records, as well as other information on mobile phones.
According to ThaiCert, there are only two genuine Thai Chana websites, including https://www.thaichana.com. This platform has no mobile apps to download, it said.
ThaiCert warned users to be cautious when clicking any links sent via SMS, adding they should avoid downloading or installing software not authorised by trusted sources.
Information is being collected as evidence for prosecution under the Computer-Related Crime Act, Mr Putchapong said.
"The government needs to take down fake websites as soon as possible," said Mr Prinya.