PDPA explainer
PDPA Purpose Limitation in Thailand
Purpose limitation under Thailand's PDPA explained, with a documented case example about data used beyond its original task.
General principle
Under Thailand's PDPA, a controller must specify the purposes of processing and must not process data for purposes beyond those notified unless another lawful ground applies.
Purpose limitation asks a practical question: what task was this data made available for, and is the current use the same task?
- Last updated
- Source record last reviewed
- Case status