You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 24, 2019

Thailand’s Personal Data Protection Act – Requirements for Employers

Subscribe to Updates
Taylor Vinters – International Employment Law Update

If an employer collects employees’ personal information, the employer must comply with the Personal Data Protection Act (PDPA).

Thailand’s PDPA, which was enacted earlier this year, contains significant new requirements for employers that collect employees’ (called “data subjects” in the PDPA) personal information. Most sections of the PDPA will become effective on May 27, 2020, so employers should be aware of their duties and liabilities.

Important PDPA requirements that relate to employers include the following:

  • Employees’ personal information can be collected only to the limited extent necessary for the employer’s lawful purpose.
  • Employers cannot collect employees’ personal information from any source apart from the employees themselves.
  • Employers must prevent employees’ personal information from being disclosed, lost, or altered.
  • Employers must delete employees’ personal information after a certain time period.
  • Employers must receive consent from employees to collect, use, or disclose the employees’ personal information.
  • Employers must inform a special government-run Personal Data Committee if an employees’ personal information is leaked.

Employers who violate the PDPA could face civil or criminal liability, as well as administrative fines, depending on the claim and breach.

Civil Liability

If an offender is found to be civilly liable (e.g. an employee sues the employer for damages arising from a breach of the PDPA), the court can order the offender to pay punitive damages capped at twice the actual damages.

Criminal Liability

The PDPA also contains criminal liability for certain offences. Penalties are set at a maximum of six months’ imprisonment, a fine of up to THB 1 million (approximately EUR 30,000), or both. If the offender is a corporate entity, and the offence is committed because of an order or act by a director, manager, or any associated persons responsible for the act, those individuals would face criminal liability and be subject to the above penalties. Moreover, a person who has a duty to order or perform any act but fails to carry out his or her duty, resulting in the company committing an offence, is also criminally liable and subject to the above penalties.

Administrative liability

Companies can also face administrative fines for violation of the PDPA, which range from THB 500,000 to THB 5 million (approximately EUR 15,000 to EUR 150,000).

Comment

If an employer collects, uses, or discloses employees’ personal information, then the employer should be aware of the PDPA’s requirements. Otherwise, the employer can face criminal, civil, or administrative penalties.

Related Professionals

Practices

Employment

Location

RELATED INSIGHTS​ 

January 12, 2024
On December 28, 2023, Cambodia’s Ministry of Labor and Vocational Training (MLVT) issued Notification No. 110/23 on the issuance of work permits for foreign employees, in accordance with the country’s Labor Law and Prakas 195 dated August 20, 2014, on work permits and employment cards for foreign employees. This is a more comprehensive notification than existed previously, as it specifically clarifies the parties that are required to apply for work permits and employment cards. Notification No. 110/23 specifies that the following types of foreign individuals must hold a valid foreign work permit and/or employment card in order to work in Cambodia: A foreign employer whose name is stated in an enterprise’s patent tax certificate must hold a foreign work permit. A foreign employee whose name is stated in an enterprise’s patent tax certificate must hold a foreign work permit and an employment card. Self-employed individuals must hold a foreign work permit and an employment card. Applications for work permits and employment cards can be submitted through the MLVT’s online portal, accompanied by the following required documents: Valid passport; Latest patent tax certificate; Physical examination form; and Photo (4×6 cm) However, foreign shareholders and members of the board of directors as defined in the company’s articles of incorporation who do not have a Cambodian resident visa are not required to obtain a work permit or employment card. For more information on regulations and requirements for foreign employees in Cambodia, please contact Tilleke & Gibbins at [email protected].
Read More
December 15, 2023
Tilleke & Gibbins’ office in Yangon provided the Myanmar chapter to the Guide to Restructuring a Cross-Border Workforce from International Employment Lawyer. This global guide, which covers 45 jurisdictions worldwide, examines the issue of workplace restructurings, particularly in relation to the needs of multinational companies. The Myanmar chapter was written by Kyaw Min Tun, an associate in the firm’s Myanmar office. The Q&A-style chapter focuses on key areas related to workplace restructuring, covering each of the following topics in detail: Reduction in workforce; Restructuring or reorganization of the business; Changing terms and conditions; and Areas to watch. A PDF of the Myanmar chapter can be downloaded through the button below. Tilleke & Gibbins also provided the Cambodia, Laos, Thailand, and Vietnam chapters to the Guide to Restructuring a Cross-Border Workforce 2024. To browse the full guide for all 45 jurisdictions, please visit the International Employment Lawyer website.
Read More
December 15, 2023
Employment law specialists from Tilleke & Gibbins’ office in Vientiane have provided the Laos chapter to the Guide to Restructuring a Cross-Border Workforce from International Employment Lawyer. This global guide, which covers 45 jurisdictions worldwide, examines the issue of workplace restructurings, particularly in relation to the needs of multinational companies. The Laos chapter was written by associates Naiyane Xaechao and Sayphin Singsouvong. The Q&A-style chapter focuses on key areas related to workplace restructuring, covering each of the following topics in detail: Reduction in workforce; Restructuring or reorganization of the business; Changing terms and conditions; and Areas to watch. A PDF of the Laos chapter can be downloaded through the button below. Tilleke & Gibbins also provided the Cambodia, Myanmar, Thailand, and Vietnam chapters to the Guide to Restructuring a Cross-Border Workforce 2024. To browse the full guide for all 45 jurisdictions, please visit the International Employment Lawyer website.
Read More
December 15, 2023
Employment law specialists from Tilleke & Gibbins’ office in Phnom Penh have provided the Cambodia chapter to the Guide to Restructuring a Cross-Border Workforce from International Employment Lawyer. This global guide, which covers 45 jurisdictions worldwide, examines the issue of workplace restructurings, particularly in relation to the needs of multinational companies. The Cambodia chapter was written by Jay Cohen, partner and director of Tilleke & Gibbins’ Phnom Penh office, and Chanvisal Lok, associate. The Q&A-style chapter focuses on key areas related to workplace restructuring, covering each of the following topics in detail: Reduction in workforce; Restructuring or reorganization of the business; Changing terms and conditions; and Areas to watch. A PDF of the Cambodia chapter can be downloaded through the button below. Tilleke & Gibbins also provided the Laos, Myanmar, Thailand, and Vietnam chapters to the Guide to Restructuring a Cross-Border Workforce 2024. To browse the full guide for all 45 jurisdictions, please visit the International Employment Lawyer website.
Read More