PDPC - NSTDA joins hands with "PDPC Singapore" to produce a Thai language manual and further develop the Data Anonymization Tool.

PDPC together with NSTDA joins hands with "PDPC Singapore" to produce a Thai language manual and further develop the "Data Anonymization Tool" to speed up awareness of the importance of anonymous data continuously.

Office of the Personal Data Protection Commission (PDPC) or PDPC together with NSTDA are moving forward with the cooperation 'PDPC Singapore' by bringing a tool to convert personal data into anonymized data 'Data Anonymization Tool' to distribute and translate the manual. Use in Thai To support the effective use of tools

Ready to continue developing tools to be consistent with the data context of Thailand. Including organizing training for personnel of both agencies. To be aware of the importance and techniques for creating anonymous data before teaching it in organizations both internally and externally.

Dr. Siwarak Siwamoktham, Secretary-General of the Personal Data Protection Committee (PDPC), revealed that one of the roles that PDPC prioritizes is promoting the development of technologies and innovations related to personal data protection. PDPC has played this role in various areas.

For example, they collaborated with NSTDA to enhance information security, and participated in workshops on using the Data Anonymization Tool, organized by the developer, PDPC Singapore. They further expanded this collaboration by obtaining the rights to translate the manual and distribute the tool in Thailand, further elevating the protection of personal data for Thai citizens.

“Cooperation between PDPC agencies of 2 countries, Thailand and Singapore. Will focus on disseminating knowledge on techniques for converting personal data into non-identifiable or anonymous data. (Anonymization) which in the first stage Officials from PDPC Singapore, who own the 'Data Anonymization Tool', will come to support Thai personnel by this time training knowledge, guidelines, and how to use the tool for target personnel of PDPC and NSTDA for further teaching. in the group of internal personnel DE Ministry officials as well as national corporate agencies.”

Anonymization refers to the process of transforming personal data into information that cannot be used to identify an individual . The purpose of anonymization is to utilize data for other purposes, such as analyzing customer behavior for product development or analyzing user trends across different regions.

which will make the information non-personally identifiable under a process that is correct according to academic principles This will allow the said information to be used safely. Reduce the risk of being Re-identification or reversible identification

Dr. Chalee Worakulpipat, a senior researcher at the National Electronics and Computer Technology Center (NECTEC), stated that theoretically, it's commonly understood that simply de-identifying directly identifiable information such as names, addresses, and national identification numbers constitutes data anonymity. However, in practice, deleting this data carries the risk of retroactive identification if the data is combined with readily accessible public information. Therefore, it can be argued that de-identification is only the first step in the process of data anonymity.

“Basically. Anonymizing data starts with classifying data sets. To separate directly, indirectly identifiable, and sensitive attribute data. Then there is the step of directly deleting personally identifiable information. (De-identification) and then the obtained data set will be made Anonymization with various appropriate methods

"Whether it's masking, using corresponding symbols to change a fixed number of characters, such as changing the zip code 10100 to 10xxx; pseudonymization, using aliases to represent identifying information, such as changing Mr. A to 2345, Mr. B to 6789; generalization, intentionally reducing data accuracy, such as converting age to an age range from 22 years old to 21-30 years old; or other methods of anonymizing data such as swapping, rearranging the dataset while retaining attribute values; perturbation, slightly modifying the original dataset values; and aggregation, transforming data sets from lists into summarized values," Dr. Chalee explained.

Anonymizing data also has the benefit of being able to exchange information securely. Under the supervision of the data owner agency The purpose of data usage must be clearly defined. Then use the process Anonymization Anonymize data from the beginning In order to forward it to other agencies for further use for their intended purposes. In addition, when exchanging anonymous information, additional strict measures should be established, such as provisions prohibiting the use of information outside of its intended purpose. Restrict access to information to only relevant individuals Including measures to control, monitor and check information regularly. To effectively prevent information from leaking

“The key to our cooperation with PDPC Singapore is to make Thai personnel aware of anonymous data. The tool itself is a secondary benefit. Because if we don't have awareness or principles It's like having a calculator in your hand but not being able to calculate it yourself. Same as the steps of Anonymization that if done too little, the identity can be traced back If you do too much, that information cannot be used for anything else,” Dr. Siwarak concluded.

The Data Anonymization Tool can be downloaded free of charge from the PDPC Singapore website: https://www.pdpc.gov.sg/help-and-resources/2018/01/basic-anonymisation . A Thai language user manual, provided by NSTDA and PDPC, can be downloaded at: https://www.nstda.or.th/nstdaxpdpc/privacytools/

Stay updated on news regarding personal data protection and security by following us on Facebook: PDPC Thailand.