Treats core activities that systematically and regularly track, monitor, analyse or predict behaviour, attitudes or characteristics as requiring regular monitoring: membership or electronic card data from which usage can be traced, pre-contract checks for credit scoring, insurance or fraud prevention, behavioural advertising, customer data held by network or telecommunications providers, and security surveillance. A large amount of personal data is judged by the number or proportion of data subjects, the volume, types and nature of data, the duration of processing and its geographic reach, and includes processing of 100,000 data subjects or more, advertising through widely used search or social media, life insurance or financial institution data, and third-type telecommunications licensees. Failure to appoint a required DPO carries an administrative fine of up to one million baht under section 82.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.