DE Ministry ushers in data protection agency
Ad hoc unit comes in response to EU rules
The Digital Economy and Society (DE) Ministry has set up a Data Protection Knowledge Centre (DPKC), a centralised unit creating awareness about data protection for state agencies and the private sector.
As Thailand’s data protection bill is being drafted and a National Data Protection Agency has yet to be established, the DPKC is operated by the Electronic Transactions Development Agency (ETDA).
The move in part comes in response to the EU’s General Data Protection Regulation (GDPR), which goes into effect on May 25, said DE Minister Pichet Durongkaveroj.
The GDPR affects domestic enterprises’ operations in terms of personal data processing for European citizens.
“All sectors need to be prepared to take care of personal data in compliance with legal principles,” Mr Pichet said.
Several laws have been in place regarding the protection of personal information, including the Official Information Act, but the principles of those laws just protect specific personal data and some do not fully protect personal information, Mr Pichet said yesterday at a seminar on the draft data protection bill.
Data protection is one of two draft bills driving the government’s digital economy transformation policy. The other one is a cybersecurity draft bill. Neither has been approved by the NLA.
Once both bills come into effect, two new agencies will be set up: a national data protection agency and a national cybersecurity agency.
Mr Pichet said personal data protection is quite complex, partly driven by rapidly evolving technology, while many agencies and sectors still lack awareness and knowledge needed for effective personal information protection.
The DPKC is a state agency working independently to protect the rights of people and help them cope with piracyrelated threats.
Mr Pichet said the DPKC will exist temporarily before being transformed into the national data protection agency once the relevant law goes into effect in 2019.
The DE Ministry has also put in place parallel measures to handle the GDPR, including setting up an ad hoc committee to operate the DPKC.
Meanwhile, the DE Ministry has invited EU representatives to discuss important issues related to the GDPR and how the new rules will impact local enterprises next month.