Thai privacy regulator announces enforcement of PDPA breaches

On 24 November 2023, the Thai privacy regulator, Personal Data Protection Committee (the “PDPC”) issued a press release for the first time that they are taking enforcement action under the Thai Personal Data Protection Act B.E. 2562 (2019) (the “PDPA“) for non-compliance with the PDPA by a Thai insurance company in relation to its handling … Read more

New sector-specific data privacy requirements for telecom operators in Thailand

On 4 September 2023, the National Broadcasting and Telecommunications Commission (“NBTC“) Notification regarding Measures to Protect Rights of Telecom Service Users relating to Personal Data, Privacy Rights and Communication Freedom in Telecom B.E. 2566 (2023) (the “Notification“) was gazetted and came into force on the same day. What is the Notification about? The Notification imposes … Read more

China relaxes measures on cross-border data transfers from China

The Cyberspace Administration of China (CAC) has released draft provisions which will relax the current requirements on cross border data transfers. The draft provisions set out exemptions from the need to comply with one of the three transfer mechanisms that would otherwise be required, namely (i) CAC assessment (ii) China’s standard contract or China standard … Read more

Common Concepts In The Data Protection Laws Of India And Singapore

India’s omnibus data protection legislation, the Digital Personal Data Protection Act, 2023 (“India’s DPDPA”), was passed and gazetted in August 2023. Notably, it shares several common concepts with Singapore’s Personal Data Protection Act 2012 (“Singapore’s PDPA”), some of which are not readily found in other laws including the European Union’s General Data Protection Regulation (“GDPR“). … Read more

Talking Shop: A consumer sector podcast series – EP7: AI booms – whilst regulation looms

AI booms – whilst regulation looms Peggy Chow, Kaman Tsoi, Duc Tran and Claire Wiseman join Aoife Xuereb to discuss the increasing use of AI in consumer sector digital marketing strategies. Analysing customer data to personalise content and target advertising according to purchasing behaviour and demographic information has become commonplace, along with the use of tools such as chatbots to automate customer … Read more

China’s Standard Contract widely adopted by MNCs to transfer personal data from China

China’s Standard Contract, also known as Standard Contract Clauses (SCCs), is a legal instrument that enables multinational corporations (MNCs) to transfer personal data from China to other countries or regions. It is one of the three legal mechanisms for cross-border data transfer under Chinese data protection laws. A security assessment conducted by the Cyberspace Administration … Read more

China Cyber Security and Data Protection: Monthly Update – June 2023 Issue

A. Regulatory Developments Measures for Standard Contract for Outbound Cross-border Transfer of Personal Data came into force on 1 June 2023 On 24 February 2023, the Cyberspace Administration of China (the “CAC“) issued the Measures for Standard Contract for Outbound Cross-border Transfer of Personal Data (the “Measures“) and published the Standard Contract for the Outbound … Read more

The Cyberspace Administration of China issues guidance on filing the standard contract for outbound cross-border transfer of personal information

On 30 May 2023, the Cyberspace Administration of China (CAC) issued the first edition of guidance on filing for the standard contract for outbound cross-border transfer of personal information (Standard Contract). On 1 June 2023, the Measures for the Standard Contract for Outbound Cross-border Transfer of Personal Information (Measures) will come into force, introducing the … Read more