thailand-pdpa

Guides compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.

Zur Installation springen

Repository: mukul975/Privacy-Data-Protection-Skills
Letzte Quellaktivität: 15. März 2026 um 00:40
Erkannte Sprache von SKILL.md: Englisch
Sterne: 269
Forks: 59

Installationsoptionen

Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.

npx skills add https://github.com/mukul975/Privacy-Data-Protection-Skills --skill thailand-pdpa

Der Befehl bleibt in einer Zeile. Scrollen Sie horizontal, um ihn vor dem Kopieren vollständig zu prüfen.

Sie bevorzugen eine lokale Kopie? Laden Sie die Dateien herunter, die SkillsMP derzeit vorliegen.

Quelldateien prüfen

Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.

Datei-Explorer

5 Dateien

SKILL.md

Quellanweisungen · Schreibgeschützte Vorschau

Zurück zur Suche Zurück zur Installation

Thailand PDPA Compliance

Overview

Thailand's Personal Data Protection Act B.E. 2562 (PDPA), published in the Royal Gazette on 27 May 2019, became fully effective on 1 June 2022 after two postponements from the original 2020 effective date. The PDPA applies to the collection, use, and disclosure of personal data by data controllers and data processors in Thailand, and extraterritorially where activities target data subjects in Thailand (Section 5).

The Personal Data Protection Committee (PDPC, คณะกรรมการคุ้มครองข้อมูลส่วนบุคคล) is the supervisory authority established under Section 8. The Office of the Personal Data Protection Committee (OPDPC) serves as the operational secretariat.

Lawful Bases for Processing (Section 24)

Basis

Section

Detail

Consent

Section 19

Explicit consent; freely given, specific, informed; written or electronic; may be withdrawn at any time

name	thailand-pdpa
description	Guides compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.
license	Apache-2.0
metadata	{"author":"mukul975","version":"1.0","domain":"privacy","subdomain":"global-privacy-regulations","tags":"thailand-pdpa, pdpc, consent-framework, dpo-requirements, cross-border-transfers"}

name	thailand-pdpa
description	Guides compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019). Covers consent framework, DPO requirements, PDPC enforcement, lawful bases for processing, cross-border transfer mechanisms, and data subject rights under the PDPA. Keywords: Thailand PDPA, PDPC, consent, DPO, cross-border transfers, data subject rights.
license	Apache-2.0
metadata	{"author":"mukul975","version":"1.0","domain":"privacy","subdomain":"global-privacy-regulations","tags":"thailand-pdpa, pdpc, consent-framework, dpo-requirements, cross-border-transfers"}

Requirement	Detail
Explicit	Must be an express statement or conduct clearly indicating agreement
Freely given	Must not be a condition of service where unnecessary; no bundling with T&Cs (Section 19(4))
Specific	Consent per purpose; blanket consent is invalid
Informed	Full disclosure of purpose, data items, recipients, retention period
Written or electronic	Written request for consent must be clear, not misleading, easily accessible
Withdrawal	Data subject may withdraw at any time; withdrawal must be as easy as giving consent (Section 19(5))
Children	Under 10 years: consent from parent/legal guardian; 10 years and above: may consent if age-appropriate understanding demonstrated

Processing Activity	Consent Type	Mechanism
Customer freight services	Contract performance (Section 24(3)) — consent not required	N/A
Marketing communications	Explicit consent (Section 19)	Opt-in checkbox in Thai and English
Employee health data processing	Explicit consent for sensitive data (Section 26)	Written consent form at onboarding
Cross-border transfer to EU HQ	Explicit consent with transfer disclosure (Section 28)	Dedicated transfer consent form

Responsibility	Detail
Advise on compliance	Advise the controller/processor on PDPA compliance obligations
Monitor compliance	Monitor compliance with the PDPA and internal policies
Audit coordination	Cooperate with the OPDPC; act as the contact point for the OPDPC
Confidentiality	Maintain confidentiality of personal data accessed in the course of duties
Independence	Must be able to perform duties independently; no dismissal for performing duties

thailand-pdpa

Installationsoptionen

Quelldateien prüfen

Thailand PDPA Compliance

Overview

Lawful Bases for Processing (Section 24)

Thailand PDPA Compliance

Overview

Lawful Bases for Processing (Section 24)

Sensitive Data (Section 26)

Consent Framework

Consent Requirements (Section 19)

Implementation at Zenith Global Enterprises

DPO Requirements (Section 41-42)

When DPO Appointment is Required

DPO Responsibilities (Section 42)

Zenith Global Enterprises DPO

Cross-Border Transfer (Section 28)

Transfer Conditions

PDPC Adequacy Determinations

Data Subject Rights (Sections 30-36)

Breach Notification (Section 37(4))

Enforcement (Sections 90-91)

Administrative Fines

Criminal Penalties

Punitive Damages

Notable PDPC Actions

Compliance Programme

Element	Detail
DPO (Thailand)	Siriporn Chaiyaporn, Compliance Manager — Bangkok office
Contact	dpo-thailand@zenithglobal.co.th
Reporting line	Reports to Chief Privacy Officer; independent reporting access to Board of Directors

Condition	Section	Detail
Adequate protection	Section 28(1)	Destination has adequate personal data protection standards as determined by the PDPC
Compliance with group rules	Section 28(3)	Transfer within a group of undertakings conducting business together, with appropriate data protection policies inspected and certified by the OPDPC (BCR equivalent)
Contract necessity	Section 28(4)(a)	Necessary for contract performance with the data subject
Consent	Section 28(4)(b)	Data subject's consent after being informed of inadequate standards
Vital interests	Section 28(4)(c)	Necessary to prevent or suppress danger to life, body, or health
Legal obligation	Section 28(4)(d)	Necessary for important reasons of public interest
Legal claims	Section 28(4)(e)	Necessary for establishing, exercising, or defending legal claims
Appropriate safeguards	Section 28(2)	Appropriate protection measures prescribed by the PDPC are in place

Right	Section	Response Deadline	Implementation
Right of access	Section 30	Within 30 days	Privacy portal in Thai and English
Right to data portability	Section 31	Within 30 days	Structured format (JSON/CSV)
Right to object	Section 32	Without unreasonable delay	Objection mechanism in customer portal
Right to erasure	Section 33	Without unreasonable delay	Automated deletion with legal hold check
Right to restriction	Section 34	Without unreasonable delay	Processing flagging system
Right to rectification	Section 35	Without unreasonable delay	Self-service correction in portal
Right to withdraw consent	Section 19(5)	Without unreasonable delay	One-click withdrawal mechanism

Element	Requirement
OPDPC notification	Within 72 hours of becoming aware of the breach
Data subject notification	Without delay if the breach is likely to affect rights and freedoms
Content	Nature of breach, DPO contact, likely consequences, remedial measures
Cross-border	Notify the OPDPC even if the breach occurred outside Thailand if Thai data subjects are affected

Component	Detail
DPO	Siriporn Chaiyaporn, Bangkok office
Privacy notice	Published at zenithglobal.co.th/privacy in Thai and English
Consent management	Platform with Thai language support; separate consent per purpose
ROPA	Processing activities register maintained per Section 39
Breach notification	72-hour workflow to OPDPC; data subject notification procedure
Cross-border safeguards	Consent-based transfers with disclosure; intra-group policy for headquarters transfers
Employee training	Annual PDPA training for all Thailand employees
Data subject rights	30-day response workflow via privacy portal

thailand-pdpa

Quellinformationen

Installationsoptionen

Quelldateien prüfen

Mehr aus diesem Repository

Mehr aus diesem Repository

Thailand PDPA Compliance

Overview

Lawful Bases for Processing (Section 24)

Thailand PDPA Compliance

Overview

Lawful Bases for Processing (Section 24)

Sensitive Data (Section 26)

Consent Framework

Consent Requirements (Section 19)

Implementation at Zenith Global Enterprises

DPO Requirements (Section 41-42)

When DPO Appointment is Required

DPO Responsibilities (Section 42)

Zenith Global Enterprises DPO

Cross-Border Transfer (Section 28)

Transfer Conditions

PDPC Adequacy Determinations

Data Subject Rights (Sections 30-36)

Breach Notification (Section 37(4))

Enforcement (Sections 90-91)

Administrative Fines

Criminal Penalties

Punitive Damages

Notable PDPC Actions

Compliance Programme