Last updated: 22 September 2026
Our approach to assessing and notifying personal-data breaches follows Section 37(4) of Thailand's PDPA, including notification to the regulator where required and prompt notice to individuals where a high risk applies.
Record the report and escalate it to the appropriate incident and data protection contacts.
Investigate the facts, affected data and risk to individuals; determine applicable notification duties.
Notify the regulator and affected individuals in accordance with applicable legal requirements.
Contain the incident, take corrective action and document the response.
Report a suspected breach immediately to info@tatc.cloud