With Phuket being a destination for over 10 million tourists worldwide and hotels constantly collecting and using customers’ personal data, Patong Resort has increased its investment in personal data protection to meet both GDPR standards and Thai law (PDPA) with the help of PDPA Thailand Consultant Team.
Since the Personal Data Protection Act B.E. 2562 (PDPA) was fully enforced on June 1, 2022, Thailand’s personal data protection standards and measures have been dramatically lifted, closely aligned with the GDPR, the European Union’s data protection law. While there are some differences in details, this alignment requires the collection, use, disclosure, or transfer of personal data both domestically and internationally to comply with the relevant laws, measures, and guidelines for personal data management and protection.
Patong Resort Hotel Co., Ltd., as an accommodation provider hosting numerous Thai and international tourists, recognizes the importance of the PDPA in protecting the personal data of their guests according to Thai law, in addition to the measures the hotel has already implemented under international laws, especially the GDPR. Therefore, Patong Resort has decided to significantly increase its investment in personal data protection according to Thai law, aiming for comprehensive and accurate compliance with the PDPA in all aspects by hiring PDPA Thailand for consultation.
Dr. Udomtipok Phaikaset, CEO of DBC Group Co., Ltd. and founder of PDPA Thailand, stated regarding personal data in the hotel industry, “The hotel business is directly involved with personal data, evident from the collection of customer data, including foreign customers’ particularly from the European Union, where GDPR law applies. If hotels wish to target advertisements to these customers after their stay, they must seek consent. Integrating PDPA with GDPR helps in understanding the nature of personal data protection, covering legal protections for both Thai and foreign customers.”
Aroonrat Swatthong, Managing Director of Patong Resort Hotel Co., Ltd., commented on implementing PDPA and using personal data protection consulting services from PDPA Thailand, “Our hotel collects substantial amounts of data from Thai and foreign guests. To ensure the best care experience, making them feel secure and respected, we took notice and wanted to proceed when the PDPA was fully enforced but were unsure of the exact steps to take. Knowing a DPO is necessary but still uncertain, we sought personal data protection consultation. The service revealed numerous legal aspects needing attention, such as drafting privacy notices, RoPA, consent forms, managing data subjects’ rights, and establishing measures for data breach incidents.”
“Patong Resort chose PDPA Thailand for their comprehensive consulting services, expertise, and experience with various organizations, including listed companies and top firms, as well as their advisory experience with hotels, ensuring a deep understanding of our business,” added Mrs. Aroonrat.
“PDPA Thailand offers personal data protection consulting services to organizations nationwide, particularly recommending the service to the hotel sector due to the primary role of personal data processing in operations and its significant impact on reputation if data incidents/breaches occur. Reputation is crucial in the hotel business,” concluded Dr. Udomtipok.
For more information on PDPA&DPO Consultant services from PDPA Thailand, please visit pdpathailand.info/pdpa-consult, Facebook Messenger: PDPA Thailand, LINE OA: @PDPATHAILAND, Email: [email protected], or call 02-029-0707.
