On 15 December 2022, the Personal Data Protection Committee’s (PDPC) criteria and procedures for reporting personal data breaches B.E. 2565 entered into force. The order defines a personal data breach as unauthorised or unlawful loss, access, use, a…