PDPA explainer
Thai PDPA Case Study
A documented Thai PDPA case study: a collection call, a question about personal data access, and the complaints, evidence requests and authorities that followed.
Case study overview
This case study begins with a debt-collection call about one financial product during which information connected with another product was referenced. It developed into data subject requests, complaints, evidence requests and review by several authorities.
If an employee or processor is assigned to Product A, what information about Product B should they be able to access?
Does lawful possession of information automatically permit its use in every interaction?
How much personal information is actually necessary for the stated task?
If the accuracy of a transcript is disputed, what evidence can verify it?
When a complaint passes between a controller, processor, regulator and another authority, who owns the resolution process?
- Last updated
- Source record last reviewed
- Case status