Things to be Aware of "Personal Data and Rights of the Owner of Personal Data"
What is personal data?
Personal data is information about an individual that enables them to be identified either directly or indirectly. It can be said that it is "information that can be linked back to that individual." Data of a deceased person and data of a juristic person are not considered to be personal data under this Act.
What is considered to be personal data?
- Personal identifiable information such as first name, last name, title, nickname, date of birth, photograph, picture, identification number, passport number, driver's license number, or any other number that can be used to verify identity, as well as location information including business cards.
- Sensitive personal data, such as health information, religious beliefs, criminal records, biometric data (e.g. facial images, iris scans, and fingerprints).
- Contact information, including address, contact location, phone number, email, emergency contact details, and beneficiary information in the event of death.
- Information regarding educational background and work history.
- Financial information such as account details, bank account numbers, wages, compensation, and other benefits information, as well as credit history.
- Information to serve specific groups, such as those with visual and auditory impairments.
- Information regarding messages, emails, documents, tasks, products, and communications created, stored, and/or transmitted using the company's network applications, computer equipment, and/or communication equipment.
- Employment-related information, including employee code, date of employment, date of promotion, employment history, provident fund, record of absences, vacations, and performance assessments.
- Service usage analysis data for retrospective review in case of usage issues including information recorded in security systems such as closed-circuit television (CCTV), recording data via electronic and other media, etc.
- Necessary information for managing employment relationships, making agreements or contracts, granting welfare rights or any other benefits, and any other information required for the company to comply with the law, as well as law enforcement requests and/or court orders.
The rights of individuals regarding their personal data including;
- The right to withdraw consent.
- The right to access personal data.
- The right to rectify personal data.
- The right to erase personal data.
- The right to restriction of processing.
- The right to data portability.
- The right to object to dataprocessing.
True Business offers a wide range of services from the True Group by True Digital Cyber Security, which is operated by True Digital Group, the country's leading provider of cybersecurity services and consulting services.It provides comprehensive cybersecurity surveillance and maintenance services for a variety of business organizations, including system testing (Offensive Service), threat surveillance (Defensive Service), managed Security Service, and advice on personal data protection (Personal Data Protection Act or PDPA).
If you are interested in consulting or receiving services, please call 1239.
Get the latest CyberSecurity service information from TrueBusiness at https://truebusiness.truecorp.co.th/th/solution/cybersecurity
For more information about personal data protection, please visit the following links: https://www.dct.or.th/upload/downloads/1612025563SummaryPDPA_DigitalCouncilofThailand.pdf
https://www.law.chula.ac.th/wp-content/uploads/2020/12/TDPG3.0-C5-20201224-1.pdf
For more information about the Personal Data Protection Act (PDPA), please visit https://truebusiness.truecorp.co.th/th/landing/pdpa
