Month: May 2020

In this article we shall examine and discuss certain aspects of the Personal Data Protection Act B.E. 2562 (2019) (PDPA) and the obligations it shall impose on Business Operators that collect and use Personal Data[1] of their customers, suppliers, contractors or their employees (collectively the “Data Owner(s)”).[2] It is also worth noting that a Royal Decree has postponed the enforcement of most sections in the PDPA by a year (until 31 May 2021). Requesting Consent from a Data Owner of Personal Data Under the PDPA, a Business Operator is permitted to collect, use and disclose received Personal Data, provided that the received information comes from lawful processing. This means that the Business Operator must have received consent from the Data Owner in the form of a legally compliant request for consent. To have a legally compliant request for consent, the […]