PDPC Proactively Investigates for 2 Months, Prevents Over 5,000 Cases of Personal Data Leakage.

Bangkok: PDPC continues to proactively investigate. In the past 2 months, it has prevented more than 5,000 cases of personal data leakage and has joined in the investigation to expand the results to arrest 5 suspects who traded personal data, with severe penalties up to imprisonment. PDPC or the Personal Data Protection Committee (PDPC) is proactively working to monitor the leakage and violation of people's personal data continuously, in accordance with the government's orders and measures to enhance the protection of personal data in the country, which Mr. Prasert Chantarawongthong, Minister of Digital Economy and Society, has urged relevant agencies to accelerate and integrate cooperation during the meeting on November 9, 2023. According to Thai News Agency, during the period of more than 2 months from 9 November 2023 - 12 January 2024, PDPC Eagle Eye Center has found the disclosure of personal data of citizens on the websites of agencies that are more than necessary or do not maintain appropriate security . And has notified the agencies to make corrections, a total of 5,261 cases, including government and local agencies, a total of 4,886 cases. The office will take strict action according to the PDPA law with agencies that continuously violate personal data. In addition, an investigation found announcements of personal data trading via the Facebook social network and proceeded to close the pages in 23 cases. In addition, there has been a joint operation with the Technology Crime Suppression Division (TCSD) to investigate and expand the case of trading personal data of citizens to fraudster gangs on November 23 and December 12, 2023, most recently on January 11, 2024, which led to the arrest or is in the process of arresting 5 suspects of illegally trading personal data. The court has already sentenced two suspects who were previously arrested to prison. The latest case, on November 14, 2019, the Phuket Provincial Court ruled that the defendant was guilty under several laws, including the Personal Data Protec tion Act B.E. 2562 Section 80 and the Computer Crime Act B.E. 2550, sentencing the defendant to 2 years in prison (after reducing the sentence by half due to a confession) without a suspended sentence, considering that 'selling personal data of others causes serious damage to the economy and society, as well as having a widespread impact on other people and supporting criminal groups to use such data to commit other crimes. The circumstances of the case are serious, and even though the defendant has never been imprisoned before, there is no reason to suspend the defendant's prison sentence.' PDPC will continue to proactively and strictly monitor and monitor personal data violations to enhance confidence in the country's personal data protection, in accordance with the government's and the Minister of Digital Economy and Society's orders.