On 14 June 2022, the Personal Data Protection Committee (PDPC) issued guidelines for consideration of administrative fines by the expert committee B.E. 2565 (2022). The guideline outlines the criteria for imposing fines on data controllers, processors, or others who violate the law, detailing procedures for notification, assessment, and enforcement of fines, including seizure and auction of assets if fines are not paid. It emphasizes the importance of considering factors like the severity of the violation, the size of the business, and efforts to mitigate harm. The committee's decisions on fines are final, and the enforcement process must adhere to relevant legal standards, ensuring fairness and accountability.
Original source