Skip to content
View in the app

A better way to browse. Learn more.

Thailand News and Discussion Forum | ASEANNOW

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Thai Hospital Slammed with 1.2M Baht Fine for Snack Bag Fias

Featured Replies

  • Popular Post

image.jpeg

Picture courtesy of PDPA Thailand

 

A renowned Thai hospital has been slapped with a hefty fine of 1.2 million baht after an alarming incident involving patient records being used as snack bags. The Personal Data Protection Committee (PDPC) made the shocking discovery, shattering public confidence in the healthcare sector.

 

The startling situation became public when paper files from the hospital's patient registry were repurposed as pouches for crispy crepes, locally known as khanom Tokyo. This breach highlighted significant lapses in data handling procedures, raising serious questions about privacy and data protection.

 

The PDPC's probe revealed that over 1,000 sensitive documents were misplaced after being sent away for destruction. The hospital had entrusted a small business with disposing of the documents but failed to monitor the process appropriately. The business owner admitted to storing the documents at his residence, which led to their leakage.

 

In response, the hospital was fined 1.21 million baht, while the disposal business owner was fined an additional 16,940 baht. This incident represents a major error in data security, which calls for rigorous oversight.

 

Another alarming case revealed by the committee involved a state agency that saw personal info of over 200,000 citizens leaked after a cyberattack. The data breach led to the sale of sensitive data on the dark web, revealing significant vulnerabilities.

 

The investigation into this cyber incident revealed weak security measures, including fragile passwords and a complete lack of risk assessment. An additional flaw was the absence of a data processing agreement with the app developer. Consequently, the agency and its private contractor faced a combined fine of 153,120 baht.

 

Additionally, three other cases focused on data leaks from online retailers and distributors, resulting in fines between 500,000 and 7 million baht.

 

Since its establishment in 2024, the PDPC has resolved six major cases of data breaches, totalling 21.5 million baht in fines. These incidents underscore the urgent need for enhanced data protection practices and stricter compliance across all sectors.

 

As Thailand grapples with these unsettling revelations, the spotlight remains firmly on the need for stricter data handling measures. The trust in institutions is at stake, and these penalties highlight the accountability required to safeguard personal information.

 

image.png  Adapted by ASEAN Now from The Thaiger 2025-08-04

 

image.png

  • Popular Post

Anyone surprised?

  • Popular Post

Problem compounded by defamation laws, which make media unwilling to name the "renowned hospital". If I was one of the patients whose personal and medical info had been leaked like this, I'd be minded to sue the hospital. Doubtless hospital would then offer a basket of fruit and chicken soup as a compromise.

Suddenly got a hankering for fish 'n chips wrapped in newspaper - to hell with lead poisoning. :coffee1:

  • Popular Post
18 minutes ago, BKKBike09 said:

Problem compounded by defamation laws, which make media unwilling to name the "renowned hospital". If I was one of the patients whose personal and medical info had been leaked like this, I'd be minded to sue the hospital. Doubtless hospital would then offer a basket of fruit and chicken soup as a compromise.

 Thai defamation laws - where telling the truth and warning the public is a crime.

  • Popular Post
5 hours ago, webfact said:

the hospital's patient registry were repurposed as pouches for crispy crepes

The hospital should be fined for selling unhealthy food. 

 

  • Popular Post

Tbh, without the name of the hospital, this article serves little purpose. It informs of a misdeed, but has no information that allows the public to make their own decision on whether to act on it. Other than avoid all Thai hospitals.

  • Popular Post

Did Immigration get fined when they were re-using copies of Passports as Forms?

10 minutes ago, JustinCredible said:

Did Immigration get fined when they were re-using copies of Passports as Forms?

I hear you, but that one was basically all foreigners' passports, so no shock, no alarm, nothing going public or viral, hence business as usual...

6 hours ago, MarkBR said:

Anyone surprised?

No. A few years back, Chiang Mai immigration were issuing the 90 day slips that were printed on the rear of foreigners extension applications,  and they were the photo passport page at that! Terrible.

  • Popular Post

And what about hygiene? How many filthy hands did these papers pass through before they became paper bags?

7 hours ago, MarkBR said:

Anyone surprised?

Only by how low the fines are.

A 1.2 million baht fine will not exactly stretch the hospital's finances.

Kind of like when immigration was using the backside of old submission forms to print new documents.

13 hours ago, webfact said:

The startling situation became public when paper files from the hospital's patient registry were repurposed as pouches for crispy crepes, locally known as khanom Tokyo. This breach highlighted significant lapses in data handling procedures, raising serious questions about privacy and data protection

Holy crepe, it's outrageous.

13 hours ago, webfact said:

The hospital had entrusted a small business with disposing of the documents but failed to monitor the process appropriately. The business owner admitted to storing the documents at his residence, which led to their leakage.

 

Were they perhaps stored in his garage behind his corvette?

13 hours ago, webfact said:

an alarming incident involving patient records being used as snack bags. The Personal Data Protection Committee (PDPC) made the shocking discovery, shattering public confidence in the healthcare sector

 

Sure, the intertubes is outraged© about papers being repurposed, but no mention of hygiene and sanitation standards, wrapping food with old, dusty medical papers teeming with who knows what bacteria and viruses?

8 hours ago, Gsxrnz said:

Suddenly got a hankering for fish 'n chips wrapped in newspaper - to hell with lead poisoning. :coffee1:

Was thinking the same

3 hours ago, Formaleins said:

No. A few years back, Chiang Mai immigration were issuing the 90 day slips that were printed on the rear of foreigners extension applications,  and they were the photo passport page at that! Terrible.

Not just Chiang Mai, at least 2 Isaan ones were doing the same, probably still are...

 

Imagine if your crispy crepe was wrapped in paper with the image of some crusty old blokes testicular cancer ultrasound scan. 

3 hours ago, Formaleins said:

No. A few years back, Chiang Mai immigration were issuing the 90 day slips that were printed on the rear of foreigners extension applications,  and they were the photo passport page at that! Terrible.

They have to use the boxes and boxes of multi-duplicate paperwork somehow. 

I must be on at least box 8 just for my dealings with them! 

18 hours ago, JustinCredible said:

Did Immigration get fined when they were re-using copies of Passports as Forms?

 

NO, they

18 hours ago, Formaleins said:

No. A few years back, Chiang Mai immigration were issuing the 90 day slips that were printed on the rear of foreigners extension applications,  and they were the photo passport page at that! Terrible.

 

And this is still going on. Hence I'll never give my Phonr:  or mail address, just make a no: up or an address

Confidentiality and resource conservation.

On 8/4/2025 at 2:55 AM, webfact said:

involving patient records being used as snack bags.

 

Imagine this, after eating your fish & chips to find a medical record showing urine and stool test results!

 

 

image.png.be2cc7f849914506cce8b3882c728fa4.png

Create an account or sign in to comment

Recently Browsing 0

  • No registered users viewing this page.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.