Consumer Council warns on TH-AI Passport data privacy

Matichon•Economy•6d ago

Reader Briefing

The Thailand Consumers Council warns users to carefully review privacy notices before consenting to the TH-AI Passport project.

•Dr. Udomthipok Praikasat analyzed the TH-AI Passport Terms of Reference (TOR) on August 20.
•The project processes extensive data, including identification, Generative AI usage behavior, and digital certificates.
•The Thailand Consumers Council suggests users verify six key areas in the Privacy Notice before clicking consent.
•The government stated that user and prompt data will be stored on cloud servers within Thailand.

Overview

•Dr. Udomthipok Praikasat analyzed the TH-AI Passport TOR and found it involves wide-scale processing of personal data and AI usage behavior.
•Dr. Udomthipok Praikasat warned that prompts and uploaded files may contain sensitive data of the user or third parties, such as customers or employees.
•Dr. Udomthipok Praikasat observed that consent should not be a single checkbox for all activities, as different activities may require different legal bases.
•The government has clarified that user data and prompts are stored on Cloud servers in Thailand to prevent AI providers from using the data for further AI generation.
•Dr. Udomthipok Praikasat noted that the TOR allows for individual-level behavior analysis and risk assessment, which requires transparency regarding who accesses the dashboard.
•Dr. Udomthipok Praikasat proposed that the project conduct a Data Protection Impact Assessment (DPIA) and an AI Risk Assessment before the official system launch.
•Dr. Udomthipok Praikasat emphasized that users retain rights under the PDPA, including the right to access, correct, object to, or withdraw consent for their data.

Full article content is available on the original source.

Read on Matichon (Thai Version)View in Google Translate

Source: Matichon (Original)

Key Quotes

Dr. Udomthipok Praikasat

"Applying for TH-AI Passport does not mean that users waive all their rights to their personal data to the project."

การสมัคร TH-AI Passport ไม่ได้หมายความว่าผู้ใช้ยกสิทธิในข้อมูลส่วนตัวให้โครงการทั้งหมด

Key Entities

Person

Dr. Udomthipok Praikasat(ดร.อุดมธิปก ไพรเกษตร)

President of the Thai Personal Data Protection Auditors and Consultants Association and subcommittee member on communication, telecommunications and information technology for the Thailand Consumers Council.

Organization

Thailand Consumers Council(สภาผู้บริโภค)

An organization providing guidance to consumers regarding the TH-AI Passport project.

Thai Personal Data Protection Auditors and Consultants Association(สมาคมผู้ตรวจสอบและให้คำปรึกษาการคุ้มครองข้อมูลส่วนบุคคลไทย)

The association whose president, Dr. Udomthipok Praikasat, analyzed the TH-AI Passport TOR.

Policy

TH-AI Passport

A government project involving AI usage and personal data processing for Thai citizens.

Law

PDPA

The law governing personal data protection under which users retain rights to their data.