SEC has prepared a questionnaire surveying preparedness toward the Personal Data Protection Act, B.E. 2562 in April 2020 for self-assessment of 276 organizations under its supervision. Based on the results, 192 firms responded, scoring 70% total preparedness in personal data protection.Business operators, who need to accelerate their preparedness for the Personal Data Protection Act, have been advised by SEC to accelerate the following, four main issues.(1) Considering appropriate legal b...
SEC Secretary-General Ruenvadee Suwanmongkol said, "Under the current global situation that technology and user behavior has changed dramatically, which may come with cybersecurity risks, SEC has realized the importance of business preparation in this matter. For this reason, SEC is set to launch an online training under the topic of “Incident Response from the Pentester’s Eyes View” and “Cybersecurity Incident Playbook: Priorities & Best Practices”, which will be graced by the presences...
SEC has opened for public comments to revise the regulations on supervision of fintech as there are some business operators applying fintech to improve their service efficiency for investors. For example, algorithm or computer coding has been used in the process of investment analysis, advice, and investment decision-making. Therefore, it could lead to new services offering and help investors to have alternatives by using the capital market to accumulate wealth in the long run.SEC studied...
According to the Ministerial Regulation Re: Granting of Approval for Undertaking Digital Asset Business (No. 2) B.E. 2563 (2020), which became effective on 27 November 2020, “Digital Asset Investment Advisor” and “Digital Asset Fund Manager” shall be two new types of digital asset business subject to SEC’s supervision. Therefore, any person who wants to conduct any of these new businesses is required to apply for an applicable license with SEC. In this regard, SEC adopts the regulations on busin...
The SEC Management introduces the new look of corporate website www.sec.or.th, featuring multi-device accessibility as well as more user-friendly experience for the public, investors and regulated
violation The SEC Office issues an administrative order to enforce any regulated person. The SEC Office presents the case to the competent authority. End Administrative Order Issuance Administrative Sanction
awareness of the importance of cybersecurity plan, work system stability and data protection. Co-organized by the SEC and the regulated entities, the cyber drill activities were conducted by experts from the
corporations depending on their inherent technology risk, which varies in terms of nature of business, organizational structure, business size and complexity of the utilized technology. In addition, the scope of
– “CRAF”) ซึ่งเมื่อผู้ประกอบธุรกิจประเมินตนเองแล้ว จะช่วยให้ทราบความเสี่ยงด้านไซเบอร์ที่เกิดจากลักษณะการประกอบธุรกิจของตนเอง (inherent risk) และผู้ประกอบธุรกิจมีระบบงานที่ช่วยควบคุม