You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

December 24, 2019

Thailand’s Personal Data Protection Act – Requirements for Employers

Subscribe to Updates
Taylor Vinters – International Employment Law Update

If an employer collects employees’ personal information, the employer must comply with the Personal Data Protection Act (PDPA).

Thailand’s PDPA, which was enacted earlier this year, contains significant new requirements for employers that collect employees’ (called “data subjects” in the PDPA) personal information. Most sections of the PDPA will become effective on May 27, 2020, so employers should be aware of their duties and liabilities.

Important PDPA requirements that relate to employers include the following:

  • Employees’ personal information can be collected only to the limited extent necessary for the employer’s lawful purpose.
  • Employers cannot collect employees’ personal information from any source apart from the employees themselves.
  • Employers must prevent employees’ personal information from being disclosed, lost, or altered.
  • Employers must delete employees’ personal information after a certain time period.
  • Employers must receive consent from employees to collect, use, or disclose the employees’ personal information.
  • Employers must inform a special government-run Personal Data Committee if an employees’ personal information is leaked.

Employers who violate the PDPA could face civil or criminal liability, as well as administrative fines, depending on the claim and breach.

Civil Liability

If an offender is found to be civilly liable (e.g. an employee sues the employer for damages arising from a breach of the PDPA), the court can order the offender to pay punitive damages capped at twice the actual damages.

Criminal Liability

The PDPA also contains criminal liability for certain offences. Penalties are set at a maximum of six months’ imprisonment, a fine of up to THB 1 million (approximately EUR 30,000), or both. If the offender is a corporate entity, and the offence is committed because of an order or act by a director, manager, or any associated persons responsible for the act, those individuals would face criminal liability and be subject to the above penalties. Moreover, a person who has a duty to order or perform any act but fails to carry out his or her duty, resulting in the company committing an offence, is also criminally liable and subject to the above penalties.

Administrative liability

Companies can also face administrative fines for violation of the PDPA, which range from THB 500,000 to THB 5 million (approximately EUR 15,000 to EUR 150,000).

Comment

If an employer collects, uses, or discloses employees’ personal information, then the employer should be aware of the PDPA’s requirements. Otherwise, the employer can face criminal, civil, or administrative penalties.

Related Professionals

Practices

Employment

Location

RELATED INSIGHTS​ 

June 22, 2021
The latest updates to the Employment and Employee Benefits Global Guide, a Thomson Reuters Practical Law online publication that provides an overview of employment and employee benefits in jurisdictions worldwide, includes a revised chapter on employment regulations in Myanmar. The Myanmar chapter was written by members of Tilleke & Gibbins’ Yangon office, including Yuwadee Thean-ngarm, director, Nwe Oo, attorney-at-law, and Sher Hann Chua, consultant. The chapter covers a wide range of key employment topics, including employment status, background checks, regulation of the employment relationship, minimum wage, working hours and holidays, illness and injury of employees, discrimination and harassment, termination of employment, resolution of employer-employee disputes, redundancy/layoffs, employee representation and consultation, business transfer and insolvency, employee relocation, health and safety obligations, taxation of employment income, intellectual property issues, and more. Practical Law, produced by Thomson Reuters, is the world’s leading legal resource for business lawyers, publishing a huge range of guides for hundreds of jurisdictions and practice areas. The Employment and Employee Benefits Global Guide covers 42 jurisdiction around the world, with Tilleke & Gibbins also providing the Vietnam chapter of the guide. To view the latest version of the Myanmar chapter, please visit the Practical Law website.
Read More
May 20, 2021
Due to the resurgence of COVID-19 in Thailand since March 2021, the Cabinet has approved new reductions in employers’ and employees’ mandatory contributions to the Social Security Fund (SSF). Contribution rates will be calculated as a percentage of each employee’s monthly wages, based on a minimum and maximum monthly wage that will be confirmed in the formal regulation published in the Government Gazette. Effective May 18, 2021, the new contribution rates for mandatory SSF contributions approved by the cabinet are as follows: From June 1 to August 31, 2021 From September 1, 2021, onward The approval of the cabinet will now be considered by the Office of the Council of State. Thereafter, the new regulation will be published in the Government Gazette before formally coming into effect. For more information on this issue, or any other aspect of labor law in Thailand, please contact Chusert Supasitthumrong at +66 2056 5793 or [email protected].
Read More