|
Article 25
|
Where a non-government agency violates the PDPA, the competent authority may, in addition to imposing fines as prescribed under the PDPA, impose the following penalties:<br/>1.prohibit the collection, processing, or use of personal data;<br/>2.order the deletion of processed personal data files;<br/>3.confiscate or order the destruction of illegally collected personal data; and<br/>4.publicize the violations, along with the names of the violator and the statutory representative thereof.<br/>When imposing the penalties under the preceding paragraph, the competent authority shall adopt the method that causes the least harm to the rights and interests of the non-government agency, within the scope necessary to prevent violations of the PDPA.
|