PDPA Thailand
Chapter III: duties of the data controller (sections 37 to 39) – PDPA Thailand

PDPA Thailand S37-1: Section 37(1) Appropriate security measures to the PDPC minimum standard

What does S37-1 require?

The controller must provide appropriate security measures to prevent unauthorised or unlawful loss, access, use, alteration, correction or disclosure of personal data, review them when necessary or when technology changes so security stays effective, and meet the minimum standard the Committee prescribes (the 2022 security measures notification).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter III: duties of the data controller (sections 37 to 39) – PDPA Thailand

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PDPA Thailand controls