Page 10 - kpiebook65071

9

Executive Summary

Right to be forgotten can be referred to as the data
subject’s right to have his or her personal data erased, destroyed
or anonymized when the data is no longer required for processing

or required to be accessible. These activities can be carried
out as a response to a request made by the data subject,

or automatically carried out by the data controller, regardless
of the data subject’s request.

Without explicitly referring to the term “right to be
forgotten”, the data subject’s right under Section 33 of the

Personal Data Protection Act B.E. 2561 (2019), and the data
controller’s duty under Section 37 (3) of the Personal Data
Protection Act B.E. 2561 (2019), these two provisions are both

capable of protecting right to be forgotten in accordance with
universal theories on right to be forgotten, legal provisions,

precedents, and guidelines in several foreign countries.