PLIC Corp., Ltd. and Its Affiliates
PDPA 2/2026
Privacy Policy for the Use of Closed-Circuit Television (CCTV)
PLIC Corp., Ltd. and Its Affiliates (CCTV Privacy Notice)
PLIC Corp., Ltd. And PLIC Thermo Co., Ltd. (hereinafter referred to in this Notice as the “Company”) have installed and operate Closed-Circuit Television (CCTV) systems for surveillance and monitoring within and around the Company’s premises, including other business-related locations such as dormitories, branches, etc., in order to protect life, health, bodily integrity, and property.
In this regard, the Company collects personal data of employees, customers, contractors, visitors, suppliers, or any other persons (hereinafter referred to as “you”) who enter areas where CCTV cameras are installed.
This CCTV Privacy Notice (“Notice”) provides information regarding the processing, collection, use, or disclosure of data that can identify you (“Personal Data”), as well as your rights as follows:
1. Purposes of Collecting Your Personal Data
The Company collects your Personal Data for the following purposes:
1.1 To protect your health and personal safety, including your property.
1.2 To protect the Company’s buildings, facilities, and assets from damage, disruption, vandalism, or other crimes.
1.3 To support government authorities or relevant agencies in law enforcement, prevention, investigation, and legal proceedings.
1.4 To assist in resolving incidents occurring during disciplinary processes or grievance procedures efficiently.
1.5 To assist in investigations and whistleblowing processes related to submitted complaints.
1.6 To support the initiation or defense of civil or criminal legal claims, including but not limited to employment-related legal proceedings.
1.7 For other purposes, if any, not contrary to the Personal Data Protection Act B.E. 2562 (2019) or other applicable laws.
2. Personal Data Collected and Used by the Company
The Company collects video and/or still images that may identify you, your voice, and your property such as vehicles, bags, hats, or clothing when you enter the Company’s premises.
CCTV cameras are installed in visible locations. Warning signs indicating CCTV usage are posted at entrances, exits, and other areas deemed necessary for surveillance. The CCTV system operates 24 hours a day to collect your Personal Data.
3. Disclosure of Your Personal Data
The Company will keep your CCTV data confidential and will not disclose it except where necessary to achieve the surveillance purposes stated in this Notice. The Company may disclose CCTV data to the following persons or entities:
3.1 Government authorities or agencies authorized by law to support law enforcement, investigations, inquiries, or legal proceedings.
3.2 External service providers, as necessary, to ensure protection against threats to life, body, health, or property of you or others.
3.3 The Company may disclose or transfer your Personal Data to its affiliated companies for legitimate interests and in accordance with the purposes of CCTV installation.
4. Cross-Border Transfer of Personal Data
4.1 The Company may disclose or transfer your CCTV Personal Data to affiliated companies or external service providers located outside Thailand where necessary to protect your health, safety, and property. Such disclosure or transfer will be made only with your consent unless another lawful basis applies (e.g., for contractual necessity or as required by law).
4.2 If your Personal Data is transferred to a country that does not have adequate data protection standards as prescribed under Thai law, the Company will implement appropriate safeguards to ensure that the transferred data receives protection equivalent to that required under the applicable Personal Data Protection laws.
5. Personal Data Security Measures
5.1 The Company implements appropriate technical and organizational security measures to prevent loss of, or unauthorized access to, destruction, alteration, modification, or unlawful disclosure of your Personal Data.
5.2 The Company will periodically review and improve its security measures as necessary or when relevant technological developments occur to ensure that such measures remain effective and compliant with minimum legal requirements prescribed by relevant authorities.
6. Retention Period
The Company will retain your Personal Data obtained from CCTV systems only for the period necessary to fulfill the purposes stated in this Notice. The Company will delete the data from its systems and records thereafter.
However, the Company may retain your Personal Data for a longer period if required by law, for the establishment, exercise, or defense of legal claims, or during court or disciplinary proceedings, including any appeal period. After such period, the data will be deleted or archived in accordance with applicable laws.
7. Your Rights under the Personal Data Protection Act B.E. 2562 (2019)
The Personal Data Protection Act B.E. 2562 (2019) aims to provide you with greater control over your Personal Data. You may exercise your rights when the relevant provisions become effective, as follows:
7.1 Right of Access
You have the right to access and request a copy of your CCTV Personal Data or request disclosure of such data collected without your consent. A written request must be submitted to the responsible department. The Company will respond within 30 days from receipt of your request. The Company may refuse your request where permitted by law, court order, or if disclosure may affect the rights and freedoms of others. In case of refusal, the Company will notify you in writing with reasons within the legally prescribed period.
7.2 Right to Rectification
You may request correction of incomplete, inaccurate, misleading, or outdated Personal Data collected, used, or disclosed by the Company.
7.3 Right to Object
You may object to the collection, use, or disclosure of your Personal Data unless the Company has lawful grounds to refuse your request (e.g., legitimate interests outweighing your rights, establishment or defense of legal claims, or public interest tasks).
7.4 Right to Withdraw Consent and Erasure
You have the right to withdraw your consent and request deletion of your CCTV Personal Data, unless the Company is required by law to retain such data, including for legal claims, compliance with legal obligations, or defense of legal rights.
8. Amendments to This Privacy Notice
The Company may revise or amend this Notice as deemed appropriate. Updated Notices will be announced prior to your entry into the Company’s premises. Security personnel may provide guidance to visitors, and notices will be posted at the guardhouse and office areas. A QR Code may also be provided for access to the updated Notice.
You are advised to review the Notice regularly, especially before entering the Company’s premises. Your entry into the premises constitutes acknowledgment of and agreement to this Notice. If you disagree with any part of this Notice, please refrain from entering the premises. Continued entry after any amendments have been posted shall be deemed acceptance of such changes.
9. Contact Information
For inquiries regarding this Notice, please contact:
Data Controller
Mr. Paisan Tessana
Tel: +66 2-159-8222
Email: paisan@plic.co.th
Data Protection Officer (DPO)
Ms. Pramuk Mali
Tel: +66 2-159-8222
Email: pramuk@plic.co.th
Announced on 23 February 2026
(Takao Okubo)
Managing Director
