Bangkok: PDPC continues to proactively investigate. In the past 2 months, it has prevented more than 5,000 cases of personal data leakage and has joined in the investigation to expand the results to arrest 5 suspects who traded personal data, with severe penalties up to imprisonment.
According to Thai News Agency, the Personal Data Protection Committee (PDPC) is actively working to monitor and address the leakage and violation of personal data, following government directives to bolster data protection nationwide. Mr. Prasert Chantarawongthong, Minister of Digital Economy and Society, has instructed relevant agencies to expedite and integrate their efforts, as discussed in a meeting on November 9, 2023.
In the period from November 9, 2023, to January 12, 2024, the PDPC Eagle Eye Center identified 5,261 instances of improper disclosure of citizens’ personal data on various agency websites. These cases included 4,886 instances involving government and local agencies, where the data was deemed excessive or insecurely maintained. Agencies have been notified for correction, and strict actions under the PDPA law will be enforced against persistent violators.
Further investigations revealed 23 cases of personal data trading announcements on Facebook, leading to the closure of these pages. In collaboration with the Technology Crime Suppression Division (TCSD), the PDPC conducted operations to tackle the trading of citizens’ personal data to fraudulent groups on November 23 and December 12, 2023, with the latest operation on January 11, 2024, resulting in the arrest or pending arrest of five suspects involved in illegal data trading.
The judiciary has already sentenced two previously arrested individuals to prison. Notably, on November 14, 2019, the Phuket Provincial Court found a defendant guilty under multiple laws, including the Personal Data Protection Act B.E. 2562 Section 80 and the Computer Crime Act B.E. 2550. The court sentenced the defendant to two years in prison, emphasizing the severe economic and social damage caused by personal data sales and their facilitation of further criminal activities.
PDPC is committed to continuing its proactive and stringent surveillance of personal data violations to enhance confidence in the country’s data protection mechanisms, aligning with governmental and ministerial directives.