THAI PDPA FILES

PDPA explainer

PDPA Data Minimisation

Data minimisation under Thailand's PDPA, including what a staff screen should and should not display.


General principle

Minimisation applies to interface design as much as to storage. A screen that shows an entire customer relationship to a worker handling one product raises a minimisation question.

Role-based access control is the common technical expression of minimisation.

How this issue appears in this case

Case materials record a statement that information about another product could be visible. Whether that reflects system configuration is an open technical question.

This section is not a legal conclusion and does not state that any party is at fault.

Last updated
17 SEP 2026
Source record last reviewed
17 SEP 2026
Case status
Ongoing