Guideline for Data Anonymization for Data Privacy in Thailand
Jiraphat Lapwattanaworakul, Chetneti Srisa-An, Supanit Angsirikul · 2022
PDPA is the first Data protection law in Thailand. The laws have been effectively enforced since June 2022. A data breach is a serious problem for all firms that hold personal data. The other bigger problem is data privacy. All government agencies have mandates to collect a lot of personal data but have to care about how to publish that information to their users. National statistics agencies are responsible for collecting data from surveys. Hospitals or the healthcare industries need to release microdata of medical records for research and other public benefit purposes. Those organizations are forced by laws to protect data privacy. Data anonymization is a promising technique for data privacy but there is no absolute guideline for a real implementation. A K-anonymity algorithm is implemented for demonstration. There is a trade-off between anonymity and utility. There is no standard or guideline for data anonymization in Thailand; therefore, this research paper is to construct a guideline for data anonymization in Thailand.