"On 1 August 2025, Thailand's Personal Data Protection Committee ("PDPC") announced the issuance of 8 fines totaling THB 14.5 million (approximately USD 448,000), which were levied against one government agency and other private entities for non-compliance with the Personal Data Protection Act of 2019 ("PDPA") in 5 cases. Since the official enforcement of the PDPA, this marks the second significant instance in which the PDPC has imposed fines on non-compliant data controllers and data processors."
"The first issuance of fines occurred last year, when the PDPC penalized data controllers for their failure to provide appropriate security measures, notify the PDPC of the data breach, and appoint a Data Protection Officer ("DPO"), with fines totaling THB 7,000,000 (approximately USD 216,000). Consequently, the cumulative total of fines issued by the PDPC, up to the present time, amounts to approximately THB 21.5 million (approximately USD 660,000)."
On 1 August 2025 Thailand's Personal Data Protection Committee (PDPC) issued eight fines totaling THB 14.5 million (approximately USD 448,000) against a government agency and private entities for violations of the Personal Data Protection Act of 2019 (PDPA) across five cases. This enforcement represents the second major set of penalties since PDPA enforcement began. Earlier enforcement last year resulted in fines totaling THB 7,000,000 (approximately USD 216,000) for failures including inadequate security measures, failure to notify the PDPC of data breaches, and failure to appoint a Data Protection Officer (DPO). The cumulative fines now total approximately THB 21.5 million (approximately USD 660,000).
Read at DataBreaches.Net
Unable to calculate read time
Collection
[
|
...
]