Thailand: PDPC issues guidelines on consent and information provision
The Personal Data Protection Committee ('PDPC') adopted, on 7 September 2022, two sets of guidelines under the Personal Data Protection Act 2019 ('PDPA'), namely the Guideline on requesting consent from the data subjects ('the Consent Guidelines') and the Guideline on procedures for notifying the purpose and details relating to the collection of personal data from data subjects ('the Notification Guidelines').
In particular, the Consent Guidelines encompass provisions concerning the type and nature of consent requests, consent criteria, and withdrawal of consent, among others. Separately, the Notification Guidelines focus on the principles governing the notification to data subjects of the purposes and details relating to the collection, use, and disclosure of personal data, including the following:
- purpose limitation;
- consent; and
- legitimate interest.