On Jan. 29, Thai DPC exempted SMEs from maintaining data records.
Thai DPC issued Announcement on the exemption of recording of personal data controllers who are small businesses, to repeal previous announcement issued in 2022.
Document dated Jan. 28, 2025, received from Thai DPC Jan. 29, summarized Jan. 31.
Announcement Overview
Specifies criteria of small business personal data controllers that are exempted from recording data as per s 39, para 1(1) to 1(6) and 1(8) of Personal data protection act.
These include SMEs, community enterprises and social enterprises eligible under laws.
However, an exempted small business personal data controller shall not be required to have a personal data protection officer under s 41 of the Personal data protection act.
In addition, they must record items according to section 39, para (1) to (4) of the act, only in cases where personal data is collected, used or disclosed in stipulated manner.
Including where there is a risk of affecting the rights and freedom of a data owner.
Effectiveness
Announcement comes into force 90 days after its publication in the official gazette.
Since it was gazetted on Jan. 8, 2025, the effective date will be Apr. 8, 2025.
Regulators
Thai DPC
Entity Types
Corp
Reference
PR, 1/28/2025; OG Vol 142, Special Issue 5, 1//8/2025
