Laws on Protection of Personal Information and Human Resource Management (Part III)

Abstract

Laws protecting personal information and human resource management are interrelated insofar as human resource management requires the collection, use, and disclosure of personal information pertaining to job applicants and personnel. Prescribing ownership rights over personal information in individual cases, companies must strictly comply with the law on personal data protection.

This article focuses on the Personal Data Protection Act, B.E. 2562 (2019) for Human Resources Management (PDPA for HR) #2 which outlines rights of data subjects, data controllers, complaints, liability and penalties as a basis for processing personal data. This indicates that companies as personal data controllers, have a duty to protect personal data following the law on personal data protection, in addition to being obligated to act on request to exercise personal data subject rights as required by law. Otherwise, civil liability, criminal or administrative penalties may be incurred, respectively.