Breach Notification
Last updated: 1 September 2026
Our 72-hour breach notification process, aligned with Section 30 of the Thai Personal Data Protection Act B.E. 2562 (2019).
0–1h
Internal Alert
Detection and escalation to the incident response team and data protection contact.
1–24h
Risk Assessment
Assess risk of harm to data subjects; determine if notification is required under the PDPA.
24–72h
PDPC + Subject Notification
Notify the PDPC and affected data subjects where there is a risk of harm, in line with Section 30 of the PDPA.
72h+
Remediation & Report
Containment, remediation, and a post-incident report.
Emergency Contact
Report a suspected breach immediately to info@tatc.cloud