Category: Empfohlen

Anuwat Ngamprasertkul and Piniti Chomsavas

On 20 June 2022, the Personal Data Protection Committee (“PDPC”) announced 4 new sub-regulations of the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) in the Royal Gazette. The PDPA was fully enforced on 1 June 2022 after it was postponed for 3 years to provide more time to all business operators to prepare for compliance.

The new sub-regulations are as follows:

1. PDPC Notification RE: Exception to the Record of Data Processing Activities for Small-Sized Organizations

This regulation provides an exemption from maintaining a full Record of Data Processing Activities (“ROPA”) to small-sized organizations as follows:

• Small and medium enterprises
• Community enterprises
• Social enterprises
• Household enterprises
• Cooperatives
• Foundations, Associations, Religious Organizations and NGOs

However, such small-sized organizations will not be exempt if they are:

• a service provider that is required to record computer traffic under the Computer Crime Act; or
• those who collect, process or disclose personal data as follows:
  • personal data that affects the rights and freedom of data subjects;
  • personal data that is not collected, processed or disclosed temporarily; or
  • sensitive personal data under Section 26 of the PDPA.

This sub-regulation will reduce the cost of preparing and maintaining the ROPA for small-sized organizations. However, small and medium enterprises are highly recommended to have a data inventory to explore the personal data lifecycle which flows inside and outside their organization in order to determine the proper lawful bases, safeguards, policies, documentation and other measures for compliance with the PDPA.

This regulation is effective from 21 June 2022 onwards.

2. PDPC Notification RE: Data Security Measures of Data Controllers

This regulation sets out the minimum requirements for data controllers to implement adequate technical, physical and organizational data security measures to prevent the unauthorized or unlawful loss, access, use, change, amendment or disclosure of personal data.

Data controllers are required to raise the awareness of employees and related persons to understand and ensure compliance with internal policies and procedures, for example, by arranging training on the PDPA.

Also, data controllers are required to ensure that the data processor has adequate measures to protect data security. Data controllers should add clauses on this to the Data Processing Agreement with the data processor.

This regulation is effective from 21 June 2022 onwards.

3. PDPC Notification RE: Criteria for Rendering Administrative Penalties by Specialist Committee

This regulation sets out the administrative authority granted by the PDPC to the Specialist Committee in its review of administrative penalties for violations of the PDPA.

The Specialist Committee shall review the administrative penalties based on the criteria as follows:

• Details of the violation, especially in the case of intentional and willful misconduct, gross negligence or lack of reasonable care;
• Severity of the violation;
• Business size of the data controller or data processor;
• Result of mitigation or reduction of damage to the data subject from administrative penalties that will be enforced;
• Impact of administrative penalties on the data subject, data controller, data processor, offender and related business or third party operators broadly;
• Severity of violations and amount of damages;
• Standard of administrative fines and enforcement measures previously used on other data controllers or data processors in similar offenses (if any);
• Previous administrative penalties enforced against data controllers and data processors including relevant persons of the juristic entity;
• Standard of responsibilities of the data controller at the time of violation;
• Code of ethics, business practice and standard of data security implemented by the data controller or data processor at the time of violation;
• Remedy and mitigation of damage by the data controller or data processor when they have knowledge of a violation;
• Compensation paid to a data subject; and
• Other related facts.

The administrative penalties or measures are ranked from a warning to orders to take corrective action, refrain from non-compliance, prohibit specific actions and limit personal data processing as well as a fine. A failure to pay a fine within the specified period will lead to a seizure, attachment or auction sale.

This regulation is effective from 21 June 2022 onwards.

4. PDPC Notification RE: Criteria and Methodology to Prepare and Maintain the ROPA for Data Processors

Data processors are required to record and maintain in the ROPA at least the details as follows:

• Name and information of the data processor and sub-data processor (if any);
• Name and information of the data controller who engages the data processor and its agent (if any);
• Name and information, contact details and method to contact the data protection officer (if any);
• Category and information of collection, process and disclosure of personal data which is processed under the instruction or on behalf of the data controller, including details of the personal data and purpose which is designated by the data controller;
• Category of the person or organization who will receive the cross-border transfer of personal data (if any); and
• Details of security measures pursuant to Section 40 paragraph 1 (2) of the PDPA.

The ROPA may be in written or electronic form and is required to be kept in the event of an inspection by the Data Controller or PDPC. Also, it must be easily accessible at the request of a designated person.

The Data Processor’s ROPA has fewer elements compared to the Data Controller’s requirements, but there may be cases where the company has both roles when processing personal information for different purposes. Therefore, it is recommended for the data processor to determine which personal data they collected, processed and disclosed beyond the responsibility as a data processor under any other lawful basis, or as a data controller for their own personal data usage, for the details to be recorded in their own ROPA.

This regulation will be effective in 180 days after 20 June 2022 which is 17 December 2022 onwards.

In the event you have any questions regarding the above regulations or PDPA compliance, please contact Anuwat Ngamprasertkul, Partner as well as Head of Litigation and Dispute Resolution and Co-Head of Tech-Media-Telecoms (TMT) at Blumenthal Richter & Sumet, at [email protected] or +662-022-1022.

Blumenthal Richter & Sumet (BRS) is hiring an attorney in the firm’s Litigation and Dispute Resolution practice with 1-3 years’ experience. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide advice with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory factors impacting their business sectors.

Blumenthal Richter & Sumet (BRS) is hiring an individual with 3+ years’ experience in the firm’s Tax practice group who will also work on Corporate matters. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide solutions with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.

Mr. Teerasitsathaporn is a highly energetic individual who brings a high level of passion and commitment to every case that he handles. With over 25 years of experience, he is well-versed in handling both domestic and foreign clients and has a proven track record in handling a broad range of complex, high-stakes civil and criminal cases for multinational companies, SMEs, and individuals in Thailand.

Mr. Teerasitsathaporn additionally has expertise in customs law, where he has significant experience in helping clients resolve disputes over customs assessments and submitting appeals to the Board of Appeal (BOA) at the Customs Department. He is also well-versed in filing complaints to revoke BOA decisions, which demonstrates his strong advocacy skills. Mr. Teerasitsathaporn has also gained extensive experience in prosecuting and defending against fraud, forgery, and other white-collar crime matters.

Before becoming a partner at Blumenthal Richter & Sumet, Mr. Teerasitsathaporn was a partner and a commercial lawyer at a well-established international law firm with offices in Thailand, where he was entrusted to advise clients on various litigation, corporate and commercial matters.

He is a member of the Thai Bar Association and the Chartered Institute of Arbitrators, and he previously served as the Director of the Notary Public Certification Examination Committee.

In September 2020, he was appointed as an arbitrator by the Thai Arbitration Institute (TAI) and is authorized to carry out the duties of an arbitrator for cases held at the TAI.

Blumenthal Richter & Sumet (BRS) is hiring an attorney with 5-10 years’ experience in the firm’s Tax practice group who will also work on Corporate matters. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide solutions with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.

Exploring a Hybrid Future: Adapting Business Models to Succeed in the New Normal has been published, and Robert H. Schuler, Senior Partner and head of the Real Estate practice at Blumenthal Richter & Sumet, contributed the real estate article covering Thailand. The article covers:

• What risk does hybrid working pose to the future of real estate in your jurisdiction – particularly in terms of commercial property asset values?
• How can businesses with commercial real estate in your jurisdiction mitigate the impact that a reduced in-office workforce has on demand for commercial space?
• Has hybrid working created a shift away from traditional prime real estate areas – e.g., cities – and are there opportunities to be had for property investors as a result?

The publication is a collaboration between IR Global and the Association of Corporate Counsel (ACC) which offers jurisdiction-specific advice on using external expertise effectively.

The article can be read below or the entire publication can be downloaded here: Exploring a Hybrid Future: Adapting Business Models to Succeed in the New Normal.

Disclaimer:

This document is of a general nature only and is provided as an information service. It is not intended to be relied upon as, nor is it a substitute for, specific professional advice. No responsibility can be accepted by Blumenthal Richter & Sumet Ltd. for any losses or damages incurred by any person doing anything as a result of this document.

Blumenthal Richter & Sumet (BRS) is hiring an ambitious and motivated Receptionist / Administrative Assistant. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide solutions with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.

Blumenthal Richter & Sumet (BRS) is hiring an attorney in the firm’s Corporate practice group. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide solutions with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.

Blumenthal Richter & Sumet (BRS) is hiring an attorney in the firm’s Real Estate practice group. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

Blumenthal Richter & Sumet is commercial, responsive and efficient. In a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide solutions with in-depth knowledge of your sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.

Blumenthal Richter & Sumet (BRS) is hiring an attorney with 1 – 3 years’ experience in the firm’s Real Estate practice group. Interested candidates should please send their resume and references to [email protected].

We offer attractive remuneration and the opportunity to develop professionally in an established international legal practice. All applications will be treated as strictly confidential. Only shortlisted candidates will be notified.

BRS assists clients to make confident business decisions. We are commercial and responsive. Efficient and pragmatic. And in a fast-changing world, we create simplicity for clients in the face of increasing complexity for them to make the right decisions, achieve their strategic priorities and identify new opportunities. We take the time to understand each of our client’s unique needs, and provide a solutions-driven commercial view with real in-depth knowledge of clients’ sectors and markets.

For over 40 years, our licensed Thai, European and U.S. attorneys have worked at our clients’ side, understanding their business while serving as a trusted counterpart who knows the law. Assisting clients as a team, we collaborate with them to navigate not only the legal issues but the regulatory aspects impacting their business sectors.