On 21 June 2022, the Personal Data Protection Committee’s (PDPC) guidelines for consideration of administrative fines by the expert committee B.E. 2565 (2022) entered into force. The guideline outlines the criteria for imposing fines on data controllers, processors, or others who violate the law, detailing procedures for notification, assessment, and enforcement of fines, including seizure and auction of assets if fines are not paid. It emphasizes the importance of considering factors like the severity of the violation, the size of the business, and efforts to mitigate harm. The committee's decisions on fines are final, and the enforcement process must adhere to relevant legal standards, ensuring fairness and accountability.
Original source