You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

September 20, 2017

Asia Business Law Journal: Interview with Jeffrey Blatt on Cybersecurity and Data Protection

Asia Business Law Journal

Jeffrey Blatt, of counsel in Tilleke & Gibbins’ corporate and commercial group and head of the firm’s technology, media, and telecommunications practice, was recently interviewed by the Asia Business Law Journal for a two-part article entitled, “Space Invaders,” which examines the importance of cybersecurity and data protection at law firms in the Asia-Pacific region, particularly after the global spread of a number of high-profile ransomwares.

In the interview, Jeffrey commented on the legal framework for cybersecurity and data protection in Thailand. He said, “We do not expect that legislation in Thailand will include any mandatory public disclosure obligations in the event of a breach in the foreseeable future. More likely is that we will see a possible reporting regime similar to the proposed new regime adopted by Singapore.” Despite the framework being in its early stages in Thailand, Jeffrey reiterated that the Thai government is aware of the issue and is in the process of drafting relevant bills.

With the diverse legal approaches being undertaken separately by different governments, Jeffrey also highlighted the need for regional cooperation in cybersecurity and data protection, such as through the Association of Southeast Asian Nations (ASEAN). “This is clearly an area where some harmonization is required, optimally by treaty and possibly led by ASEAN,” he said. “Cross-border data transfers are a reality today, as is government lawful access of data for data stored/transiting a jurisdiction.”

The Asia Business Law Journal is published by Vantage Asia, a leading Hong Kong publisher that specializes in providing business law information to business leaders, in-house counsel, and private practice lawyers in Asia. If you would like to read the full article, please visit the Asia Business Law Journal website (subscription required).

RELATED INSIGHTS​ 

February 9, 2022
On February 8, Nopparat Lalitkomon, senior associate, and Thammapas Chanpanich, associate, delivered a Thai-language webinar entitled “Personal Data Protection Guidelines for Insurance Industry.” During the session, the two speakers from Tilleke & Gibbins’ corporate and commercial group discussed the following topics: Key principles of personal data collection; Scope of establishing the principle of legality for insurance companies; Notification of data collection and data processing in accordance with the law ; Procedures of execution between insurance companies and their counterparties; and Managing personal data collected prior to the effective date of the PDPA. A recording of the webinar (in Thai) is available on the Tilleke & Gibbins YouTube channel.
January 19, 2022
On January 18, 2022, Tilleke & Gibbins held a Thai-language webinar to clarify key principles of Thailand’s Personal Data Protection Act B.E. 2562 (2019 (PDPA) for human resources professionals as the law’s effective date draws closer. In the webinar, Nopparat Lalitkomon, senior associate, and Gvavalin Mahakunkitchareon, associate, in the firm’s corporate and commercial group jointly discussed the following items: Scope of personal data collection for the human resources department; Purpose of personal data processing and establishing the principle of legality; Notification of data collection and data processing in accordance with the law; Requesting consent from data subjects; Procedures of execution according to the rights of data subjects (e.g., job applicants, employees, and former employees); and Managing personal data collected prior to the effective date of the PDPA. A recording of the webinar (in Thai) is available on the Tilleke & Gibbins YouTube channel.
December 17, 2021
On December 15–16, Kasamesunt Teerasitsathaporn and Pongpalin Chantrapirom of the firm’s dispute resolution group in Bangkok offered a two-part Thai-language webinar series titled “Violations of the Personal Data Protection Act and Case Studies in Europe” to equip Thai businesses with proper knowledge and understanding before Thailand’s Personal Data Protection Act comes into full effect in June 2022. In the webinar series, Kasamesunt and Pongpalin provided a comprehensive overview of obligations of the data controller and data processor; discussed civil liability, criminal offenses, and administrative penalties; addressed enforcement structures; covered complaint proceedings; and shared case studies from Europe to highlight mistakes that Thai companies should learn from. Video recordings of the two parts (in Thai) are available on the Tilleke & Gibbins YouTube channel.
December 9, 2021
On December 8, Tilleke & Gibbins collaborated with True Digital Park to offer a Thai-language webinar on e-commerce laws and regulations in Thailand. In the webinar, Penrurk Phetmani, senior associate, and Nutavit Sirikan, associate, both in the firm’s corporate and commercial group in Bangkok, provided a comprehensive overview of the regulatory framework for launching and sustaining successful e-commerce operations in the country, including in-depth discussions on a number of common legal concerns for SMEs: Relevant licenses and permits and how to secure them; Appropriate procedures to establish and register e-commerce operations in Thailand; Newly announced regulations on credit terms and food pickup/delivery services; Key trends and issues in tech, e-commerce, and e-services; and The impact of competition, consumer protection, and data privacy laws on online business operators. A full video recording of the webinar, which was presented in Thai, is available on the Tilleke & Gibbins’ YouTube channel.