CSR - Information

Thailand's Personal Data Protection Act (PDPA), enacted in 2019, has been postponed twice due to the severe outbreak of COVID. Although it had a considerable impact on businesses who were preparing to avoid conflict with the law, it was finally enforced on June 1, 2022.
In response to this new law, YANMAR CAPITAL (THAILAND) (hereinafter, YCT) has been conducting a preliminary study and analysis of requirements prior to actual implementation for the past two years. Based on a gap analysis with the new law, from fiscal 2020 onwards we have been working to raise employee awareness of the importance of protecting personal data. Under the PDPA, YCT, which handles more than 50,000 personal information, is the "data controller". On the other hand, since the personal data of employees are subject to the law, YCT employees are "data protected persons" and have the same rights as customers. Therefore, it is essential to raise the awareness and the understanding among employees.
In fiscal 2021, we held a total of 6 online in-house seminars, which were attended by 61 employees engaged in front office operations and 136 employees in support departments. In addition to establishing procedures in line with the PDPA, such as responding to inquiries from customers regarding personal data and appropriate use of personal data for marketing purposes, Q&A was also created to ensure employee understanding.
Moreover, we have appointed a Data Protection Officer (DPO) and published the contact information on our website so that "data protected persons" can make inquiries regarding personal data protection.
YCT will continue to promote PDPA compliance at all points of contact with customers.
As an example, YCT will post a QR code that links to YCT's personal data protection policy on the back of the invoices sent to customers, or in LINE official accounts. Going forward, we will carefully observe the detailed regulations of the PDPA and ensure thorough compliance.