Thailand
PDPA TH
Personal Data Protection Act B.E. 2562
简要说明
Thailand's PDPA is a GDPR-style consent law. For cookies and marketing that are not strictly necessary it generally requires freely given, specific, informed and explicit prior consent, with separate consent for sensitive data.
地区
Thailand
生效状态
Fully in force since 2022
分类
亚洲与非洲
适用对象
Data controllers and processors that collect, use or disclose personal data of individuals in Thailand, including those based abroad offering goods or services to people in Thailand.
处罚
Administrative fines up to THB 5 million, plus possible criminal penalties and compensation for unlawful processing of sensitive data.
主要义务
- Obtain explicit prior consent for non-essential processing
- Provide a clear privacy notice before collection
- Honor access, rectification, erasure and objection rights
- Appoint a data protection officer where required
- Report data breaches to the office within the required timeframe
如何使用 ConsentX 满足 PDPA TH 的要求
- 1
扫描您的网站
运行免费扫描,找出网站上的每一个 Cookie 和跟踪器,从而准确了解 PDPA TH 下哪些内容需要取得同意。
- 2
展示按地区适配的同意横幅
添加 ConsentX 横幅。它会识别每位访问者的地区,并自动展示 PDPA TH 所要求的同意流程。
- 3
在取得同意前拦截跟踪器
在访问者同意之前,持续拦截非必要的 Cookie 和跟踪器,确保同意前不会有任何加载。
- 4
记录防篡改凭证
每一次选择都会保存为防篡改的同意回执,可在 PDPA TH 审计中提供。
- 5
按时处理数据主体请求
使用内置的 DSAR 工作流与 SLA 计时器,在法定期限内回应查阅、删除和退出请求。