PDPA explainer
PDPA Controller vs Processor
The difference between a data controller and a data processor under Thailand's PDPA, and why it matters when work is outsourced.
General principle
Delegating a task does not delegate accountability. The controller remains responsible for the lawfulness and scope of what the processor does.
The processing agreement should define exactly which data the processor may access for which task.
- Last updated
- Source record last reviewed
- Case status