|
Article 25
|
In the event that a non-government agency has violated the PDPA, the central government authority in charge of the industry concerned or the special municipality, county (city) government concerned may impose fines on the non-government agency in accordance with the PDPA and may also enforce the following corrective measures:<br/>1. prohibit the collection, processing or use of the personal data;<br/>2. order the erasure of the processed personal data and personal data files;<br/>3. confiscate or order the destruction of the unlawfully collected personal data; and/or<br/>4. disclose to the public the violation of the non-government agency, the name of the non-government agency and its responsible person/representative.<br/>Where the central government authority in charge of the industry concerned or the special municipality, county (city) government concerned enforce the corrective measures referred to in the preceding paragraph, such measures shall be within the scope that is necessary to prevent and remedy the violation of the PDPA and shall do the least harm to the rights and interests of the non-government agency concerned.
|