Why we need data protection now

[webfact]

Why we need data protection now

By The Nation

 

 

Will pending legislation be enough to head off security breaches like those that occurred at two Thai banks?

 

Thailand needs to meet the international standard on data protection and data leaks, especially in the wake of computer hacking incidents at two major Thai banks, in which the corporate and personal information of more than 120,000 customers was compromised.

 

The European Union’s General Data Protection Regulation (GDPR) law, which came into effect in May, has set the global benchmark for both protection and for issues related to leaks. But Thailand’s version of that legislation, which the National Legislative Assembly is expected to enact later this year, does not specifically address data leak issues, even though this is no less important than protecting data.

 

Only the National Broadcasting and Telecom Commission (NBTC) currently has rules and regulations in place on data leaks, which are applicable to telecom operators and related entities. 

 

Earlier this week the Bank of Thailand reported that Krung Thai Bank had found its computer system compromised, affecting the security of more than 117,000 customers’ personal information used in its mobile application for obtaining and repaying different kinds of loans. Kasikorn Bank’s computers were also hacked, affecting the data of about 3,000 corporate customers who use the bank’s online letter-of-guarantee service.

 

These two shocking incidents should be an urgent wake-up call for all parties concerned to ramp up measures to prevent leaks and ensure the response is as efficient and effective as technically possible. The NBTC, for example, requires telecom operators to report any leaks within 72 hours and provide timely information and remedies to owners of the data. There is, however, no such requirement concerning banks and other financial institutions regulated by the Bank of Thailand and other authorities.

 

The government has to speed up enactment of the data-protection bill and add provisions aimed at preventing leaks. It must guide the parties concerned in responding to such incidents, which are likely to happen more frequently due to widespread adoption of online and mobile banking services.

 

A huge amount of individuals’ personal data now resides in computer systems, giving cyber-criminals tremendous incentive to break into the digital storehouses of banks and financial institutions. And yet few Thai banks have invested adequately to safeguard their customers’ information even as they rush to move them onto online and mobile platforms.

 

While there may never be a 100-per-cent-assured way to prevent the theft of financial data, it is imperative that responses to hacks are timely and effective in addressing potential damage to customers. People and private firms put their faith in banks to store their sensitive personal and corporate data on computer servers. They should never have to face the shock of 

being financially vulnerable.

 

Besides the impacts on Thai customers, these latest intrusions will shake the international community’s confidence in the Thai banking system in terms of data security. That doubly makes it the government’s duty to fast-track legislation on data protection and data leaks that meets international standards, as set out by the European Union’s GDPR.

 

In the meantime, the Bank of Thailand also needs to come up with interim measures to prevent further leaks of sensitive customer data and to require timely and effective responses when such incidents occur.

 

Source: http://www.nationmultimedia.com/detail/opinion/30351346

 

-- © Copyright The Nation 2018-08-03

[Samui Bodoh]

"...Besides the impacts on Thai customers, these latest intrusions will shake the international community’s confidence in the Thai banking system in terms of data security. .."

 

Sadly, I doubt that Thai governments care much about privacy issues for their population, but the point made (above) regarding international entities is very, very true.

 

Thailand needs laws and regulations to protect data and to inform people if/when problems arise.

 

However, I see the issue as being one more of enforcement; who believes that Thai banks, financial institutions, etc. would ever pay a price for mistakes and/or leaks? Who would have confidence in the enforcement system? Who would believe that Thai institutions would be forthcoming and transparent regarding privacy issues? Who would believe any penalties determined by law would actually be enforced?

 

The world is becoming more and more digitized, and the issue for the future will be one of confidence.

 

Anyone out there have confidence in the Thai government to act as a guarantor for your financial interests? 

 

Anyone?

 

[Fex Bluse]

IT people even in developed countries tend to be challenged, but Thais take it another step. 

 

You couldn't trust ANYTHING on a computer here. They are neither savvy nor concerned with the safety of anyone's info. Ever seen the stacks of people's personal info laying around on open counters after hours at mobile shops in Tesco ect? That paints a perfect picture of Thai attitudes.

[YetAnother]

online banking in thailand ? you have to be joking

[bluesofa]

4 hours ago, webfact said:

Why we need data protection now

Also: Why we need immigration to stop making photocopies using the blank side of previously photocopied documents detailing other people's complete passport information, then handing them out to someone else completely.

 

[Fex Bluse]

The fact is, Thailand has very little hope in this area, just as with road safety or perhaps even less hope. 

 

As with so many things here, it's a cultural and attitude issue, not one of aptitude or ability.

 

Humans excel at what they care about. Thais, care most deeply about food, looking good, and fun. And, they are world class in those areas.