Chandler MHM


Data Protection

Data Protection

Chandler MHM is at the forefront of the data protection landscape in Thailand, having worked closely with the drafters of the law and sponsoring publications on this issue with leading academics from Chulalongkorn University.

Our experience covers the full spectrum of the data protection law itself, without exception. Our services cover all possible measures and actions regarding data protection, including conducting internal data protection audits to identify gaps. We normally identify gaps and rectify non-compliance by conducting in-depth interviews, preliminary questionnaires, and documentary review. We undertake creation, alignment (between existing and new documents, and also between offshore and domestic documents), and revision of data protection documents, including policies, notices, consent forms, data processing agreements, data sharing agreements, protocols and guidelines (in addition to others).

We also provide general advice and training to management personnel, employees and operators, and data protection officers to create general awareness. Our training increases the ability of relevant personnel to raise red flags during operations to ensure proper stoppage of work when there is risk, and ensure full understanding among employees to allow employees to be able to effectively utilize the existing data protection documents and mechanisms. In addition, we act as an assistant to many large companies’ data protection officers, providing real-time advice and answers to their questions in accordance with their circumstances.

We have been at the forefront of this landscape in Thailand for many years and have assisted numerous companies in their data protection exercises and projects. As a result our experience spans most industries, including banking, insurance and re-insurance, oil and gas, automotive, manufacturing, wholesale and retail, consumer products and FMCG, real estate, gaming and information technology, import and export, data analytics and consultancy, leasing, transportation, hotel management, education, recruitment, pharmaceutical and supplements, food and beverage, and restaurant chains. This means that we can leverage our broad experience from these industries to resolve any outstanding issue from a client and find the most practicable and financially viable solution for such issue.  

We are pleased that Export-Import Bank of Thailand won the “Best Practice Award” in 2020 from the Ministry of Digital Economy and Society following our support for their data protection project.

Data Protection Due Diligence and Compliance

  • ExxonMobil, Generali, Nissan Motors and its subsidiary in Nissan Group, Sanofi-Aventis, Vinythai, Nikon, Bouygues, CK Power, Ch. Karnchang, Colgate and Hill’s, Melia Hotels, NTT, BRED IT, Mizuho, Hokkoku, GlaxoSmithKline, Exterran, Sony, Exim Bank, Food Passion  (Bar B Q Plaza), Ever Medical, Synphaet Hospital, Sukhumvit Hospital, SCCP Reit, Dusit Thani, Thainamthip, Lotus, Herba, GSK, Thai Red Cross, Hitachi, Gaysorn, Ninja Logistic, Isuzu, CTI Logistic, Prospect REIT Management among others, on different parts of data protection internal review and compliance work, including, as applicable,  PDPA matters ,documentary studies, staff interviews for internal mechanisms and conducts, presentation, training, creation of a due diligence report, and creation or revision of data-related documents.

Data Protection Training and Public Seminar

  • Provided numerous other companies and public organizations with training on data protection law, including GlaxoSmithKline, Sumitomo Chemical, Win Performance, joint seminar with Slaughter & May, joint seminar by Spanish-Thai Chamber of Commerce, Belu-Thai Chamber of Commerce, British Chamber of Commerce, the Netherlands Chamber of Commerce, Toyota Tsusho, Islamic Bank, SME Bank, Thainamthip, Win Performance, Thai Red Cross, Baywa, Exim Bank joint seminar with PDPC and PTT, and SEC joint seminar with PDPC.
  • Export-Import Bank of Thailand in its conducting of a self-assessment exercise and preparing legal documents in order to comply with the Personal Data Protection Law. Thai Exim Bank received recognition in “The Best Practice” category at the PDPA AWARDS 2020 presented at the DPO-CDO Symposium 2020.

Enquiries about Data protection:

Please contact us by E-mail.

Data Protection:People