Thailand Seeks Public Comments On Draft Amendments To ROPA Exemptions

On October 31, 2024, Thailand's Office of the Personal Data Protection Committee (PDPC) opened a public consultation period on its draft notification regarding exemptions from the requirement to create and maintain records of processing activities (ROPAs) under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

This draft notification aims to amend and revoke certain aspects of the first ROPA exemption notification issued in June 2022 and outlines the criteria for data controllers to be exempted from the obligation to prepare and maintain such records. Although it is officially titled "Notification of the Personal Data Protection Committee on Exemption from Record-Keeping Requirements for Small Business Data Controllers," this draft notification applies to all types of exempted data controllers (see list below), and not only small businesses.