PDPA Thailand
Chapter III: duties of the data controller (sections 37 to 39) – PDPA Thailand

PDPA Thailand S37-2: Section 37(2) Preventing unauthorised use by persons receiving data

What does S37-2 require?

Where personal data is provided to a person or legal entity other than the controller, the controller must act to prevent that person from using or disclosing it unlawfully or without authority.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter III: duties of the data controller (sections 37 to 39) – PDPA Thailand

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.