You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

Search
Close this search box.
June 24, 2024

Thailand: Ruling Clarifies “Lawful Basis” for Processing Certain Personal Data

Subscribe to Updates

In March 2024, a Thai court of first instance handed down a decision in a personal data protection case against an insurance company in Thailand. The landmark ruling has important implications for the disclosure of special categories of personal data.

The case concerned an individual, acting as the plaintiff, who filed a claim against an insurance company, as a data controller, and its representatives, for collecting, using, and disclosing the results of the plaintiff’s blood alcohol level test, along with a photo of the plaintiff taking the test, without explicit consent, resulting in his insurance claim being rejected. The company also disclosed the data to the insured party, who is the plaintiff’s family member, causing the plaintiff to suffer reputational damage, discrimination, humiliation, and ill treatment.

Since results of a blood alcohol level test are considered a special category of personal data pursuant to section 26 of the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the plaintiff filed the claim with the criminal court, requesting that the criminal penalties under the PDPA and the Penal Code be imposed on the defendants, and that the defendants delete or destroy the plaintiff’s personal data. The insurance company argued that it had disclosed the test results and the photograph to the plaintiff’s family member—as the insured under the insurance agreement—for the purpose of informing the insured of the rejection of the insurance claim.

Considering these facts and reasons, the criminal court ruled that the processing of this special category of personal data was necessary for the defense of the insurance company’s legal claims pursuant to section 26(4) of the PDPA, and therefore, explicit consent was not required. As a result, the criminal court dismissed the case.

Key Takeaways

While this case was dismissed, it indicates that explicit consent is not the only legal basis for processing a special category of personal data, and data controllers are able to process personal data as long as there is a lawful purpose and an appropriate legal basis to achieve that purpose. This case also suggests that data subjects are now becoming more aware of their rights in regard to privacy and personal data, which could increase the likelihood of more cases being brought before the courts.

As this ruling was made by the court of first instance, it might be appealed.

For more information on the interpretation of the PDPA, or on any aspect of data compliance in Thailand, please contact Nop Chitranukroh at [email protected], Nopparat Lalitkomon at [email protected], Gvavalin Mahakunkitchareon at [email protected], or Wilin Somya at [email protected].

Related Professionals

RELATED INSIGHTS​

December 24, 2024
On November 30, 2024, the Data Law was officially promulgated after an accelerated preparation process that began in February 2024. The Data Law is set to take effect on July 1, 2025. Having extraterritorial effect, the Data Law will impact both local and foreign individuals and enterprises. As noted in our previous legal update, the Data Law governs digital data, the National Data Center, the National General Database, digital data products and services, digital data management, and the rights, obligations, and responsibilities of agencies, organizations, and individuals related to digital data activities. This legal update provides an overview of the Data Law, with a deep focus on the key provisions likely to impact businesses operating or offering services in Vietnam. New Data Definition and Classification The Data Law broadly defines “digital data” as data about objects, phenomena, and events, which can include one or a combination of audio, images, numbers, text, or symbols represented in digital format (hereinafter referred to as “data”). This definition is very broad and potentially covers any information recorded or represented in digital forms, including personal and nonpersonal data (such as business data, transactional data, trade secrets, etc.). Data is further categorized into different types that can be used by public bodies. However, the rights and obligations associated with each type of data are not clearly addressed. The data classification criteria include: The nature of data sharing (shared data, private data, open data); The importance of data (core data, important data, and other data); Any other criteria to meet the requirements of data administration, processing, and protection, as determined by the data owner. While the Data Law requires private organizations to categorize data based on its level of importance, it still grants these organizations the right to categorize data based on other criteria. Cross-Border Data
Read More
December 20, 2024
With intellectual property playing an ever-increasing role in economic development, the need to harness, promote, and protect ASEAN innovation remains urgent as integration progresses. Among its objectives, the ASEAN Economic Community aims to transform the region into a hub of innovation and competitiveness and ensure that the region remains an active participant in the international IP community. With ASEAN member states increasing IP generation and further committing to global IP regimes, the region is increasingly looking toward sophisticated IP ownership and holding structures. IP Holding Companies ASEAN-based companies continue to centralize ownership of their IP assets in offshore holding and licensing vehicles—an approach multinational companies headquartered elsewhere have been using for a number of years. IP-intensive companies look to locate their IP portfolios in low-tax jurisdictions with strong IP registration and protection laws. The company then licenses the IP to operating companies in the group or to third-party licensees, franchisees, agents, distributors, and other partners in return for royalties or license fees. These special-purpose vehicles are typically referred to as IP holding companies. IP holding companies are popular because they can help corporations minimize tax, gain tax benefits or concessions, protect IP from bankruptcy or other claims against the parent company, and focus management attention on the IP portfolio as an income generator. Tax and IP Holding Companies Tax is the primary reason most companies park their IP in separate IP holding vehicles. Sometimes, companies choose to establish their IP holding company in a no-tax, low-tax, or preferred-tax jurisdiction close to their home country. The selected jurisdiction should also be a country with a large and well-established tax treaty network. Double taxation treaties are key considerations in jurisdiction shopping. If the IP assets need to be pledged as security for future borrowings or if they are to be included
Read More
December 20, 2024
Closing out the year, Thailand’s Department of Intellectual Property (DIP) has gifted green innovators with a chance to take a faster route for examining their patent and petty patent applications under the “Target Patent Fast-Track” program. This route prioritizes environmentally sustainable inventions, and significantly accelerates the preliminary and substantive examinations of selected applications at no additional official fee. The program was publicly announced on December 2, 2024, in the DIP Notification on the Expansion of Technological Fields under the Target Patent Fast-Track Program, which took effect on December 15, 2024. The expedited process is open to both Thai and foreign applicants, provided the requirements in the notification are met. Under the fast-track program, a first office action for qualifying applications can be expected within 6 months during the preliminary examination stage. These applications will also be issued a first office action within just 12 months in the substantive examination period after publication. The DIP begins accepting formal requests for selection to participate in the program from January 1, 2025, onward. Each applicant can submit only one application per fast-track patent program per month, as selected applications cannot belong to the same applicant. No more than 10 applications per month will be chosen to participate in the fast-track route, with the results being announced on the 5th of every following month. To be eligible for selection, applications must comply with all the fast-track requirements specified in the recent DIP notification, particularly: The patent or petty patent application must have been filed with the DIP for at least three months, or a substantive examination request has already been filed in the case of patent applications. Each application must contain no more than 10 claims throughout its participation in the program. The application must be electronically filed in Thailand first or through
Read More
December 18, 2024
The EU-Thailand Free Trade Agreement is drawing a lot of interest as the fourth round recently concluded in Bangkok. Despite negotiations starting in 2013, there was a ten-year pause before we saw the first round of negotiations end in September 2023. The initial plan was for four rounds of negotiations, with the free trade agreement (FTA) finalized in 2025. However, following the fourth round it is clear that the negotiations are still ongoing. Now, the question is: how much closer are the EU and Thailand to concluding their FTA? The EU initially submitted 13 chapter proposals for the FTA, followed by a further 12, and these became the springboard for the negotiations. Given the complexity of agreeing on an accord of this size, there will probably be additional proposals submitted in 2025. These chapters have seen sector-specific negotiation groups formed, and although it has been difficult to truly gauge the status, steady progress has been made in each. Arguably one of the biggest points of discussion pertains to the customs process for imports and exports. Both sides aim to align their practices in relation to rules of origin and custom rates, with preferential tariff treatments offered to goods originating from Thailand and the EU, as well as talks of eliminating or reducing relevant taxes. The desire for a faster customs clearance can be seen in EU proposals for clearance of goods on arrival. Although there has been progress in agreeing to a more simplified customs process, more work needs to be done before we hear news of the agreed-upon fees and charges, or confirmation of what goods would be allowed temporary admission. When we consider customs clearance, it is important to also examine what this FTA could mean for rightsholders. One piece of good news is that it appears
Read More

Contact

We have seven offices in six countries
across Southeast Asia.

Contact Us

Careers

We are always seeking great people to grow
our amazing team.

Join Us

Networks

© 2024 Tilleke & Gibbins International Ltd. All rights reserved.

© 2020 Tilleke & Gibbins International Ltd. All rights reserved.

Privacy Policy

| Fraudulent Communications

| Legal Notice