A case study of assessing PDPA compliance of the elderly care robot

Abstract

Thailand's Personal Data Protection Act B.E. 2562 imposes the directives to organizations that collect, publish, proceed or make use of personal data to protect the rights of the personal data subject. However, an assessment of whether an organization is able to handle personal data in accordance with the Act, a PDPA noncompliance identifying is required. This research presents a 6-step sample guideline for health IT service providers to assess PDPA compliance. This guideline based on a case study of the assessment of an elderly care robot can be used by health IT service providers to self-assess and improve their personal information management processes.