dtac stresses importance of personal data privacy at trade court discussion

  • Although the PDPA act’s enforcement has been postponed, dtac stresses companies should get ready now.
  • PDPA affects how businesses collect, use and disclose data.
  • It is not simply a security issue but also requires using personal data in accordance with objectives notified to the data subject, making thorough training of employees necessary.

Although its enforcement is postponed to 2021, the Personal Data Protection Act (PDPA) remains a hot topic for Thai businesses, many of which are anxious about their ability to implement it and its potential impact on trade secrets.

To tackle the issue, Mr. Montri Stapornkul, dtac’s privacy expert, joined Thitirat Thipsamritkul, a law lecturer at Thammasat University and Rabkwan Choldamrongkul, the Chief Legal Officer at easyPDPA, to share their views in a talk held at the Intellectual Property and International Trade Court on the Personal Data Protection Act (PDPA).

The PDPA is designed to protect personal data both in government and private sectors. The act, which shares similar characteristics with the General Data Protection Regulation (GDPR) implemented by the European Union in 2018, was originally planned to be enforced in May 2020. But most chapters of the act were deferred by a year to give the public and private sectors more time to prepare internal processes and reduce the financial burden from the COVID-19 outbreak. 

“Companies should use the deferment to look into how they can translate the law into practice and put in place various policies and measures related to personal data protection,” dtac’s privacy expert explained. “Privacy is more complicated than just keeping sensitive information safe. For dtac, being a partner with Telenor, gave us a head start thanks to their GDPR experience. But it has been a long journey nonetheless.”

At the panel discussion, which also explores the impact of the new act on intellectual property, Mr. Stapornkul stated that in general the implementation of the PDPA, which grants individuals the rights to access their personal data held by a company, shouldn’t affect a company’s safeguard of trade secrets.

“The challenges for businesses of almost any size is that the act helps define clearer consumer rights to personal data, meaning personal data must be used for solely for stated purposes, and consumers can seek remedies when their PDPA rights are violated,” he said.

In the digital economy, many businesses collect personal data in various forms and use it to tailor personalized seamless experience for individual customers. The pandemic outbreak prompted a surge in digital adoption in Thailand, and people spend more time working, playing, and shopping online. But it also poses a greater threat to privacy.