From left: Tiwa Petcharat – TCCtech Data Center Operation Director, Nacharie Rujirat (2nd From Left) LSA Managing Director, Stephanie Chiang (3rd From Left) W.Media General Manager, Hirotaka Kamata ( 4 From Left) IIJ Principal Consultant - Data Privacy, Vincent Liew (Middle) W.Media Co-Founder & Director From right: Veerapat Reungdej - TCCtech Commercial Director-Sales External, Rungrote Charoenchaikorn (2nd From Right) Project Management Office Director, Budsarin Pradityont (3rd From Right) TCCtech General Manager, Waleeporn Sayasit (4 From Right) TCCtech Corporate Communications Director

T.C.C. Technology Co., Ltd (TCCtech), Thailand’s leading Integrated Technology Infrastructure Provider, has jointed with Internet Initiative Japan Inc. (IIJ), one of Japan's leading Internet-access and comprehensive network solutions providers, in organizing a session called “Trust in the Digital World and Data Privacy – The Emerging Challenges and Opportunities in Cloud Ecosystem.” This topic relates to the discussion regarding the Personal Data Protection Act B.E. 2562 (2019), which emphasizes the importance of control of cross border transfer of personal data, in compliance with General Data protection Regulation (GDPR). This is a part of the Thailand Cloud & Datacenter Convention 2019 (THCDC 2019), which was organized by W.Media Pte. Ltd. Singapore,along with OPEN-TEC (Inspired by TCC Technology), an alliance of 17 ASEAN representatives at the Sofitel Sukhumvit hotel in Bangkok, on 6th November 2019.

Data moves around the world in today’s international businesses. One of the biggest challenges facing businesses leveraging global cloud computing is emerging and intensifying data privacy regulations introduced by governments across the world. Many of these rules restrict cross-border transfer of personal data. When selecting cloud computing infrastructure, businesses should compare various offerings carefully in terms of how they comply with global privacy regulations, and how easy or difficult it is to transfer personal data between regions and jurisdictions.

Mr. Hirotaka Kamata, a Principal Consultant, Data Privacy from Internet Initiative Japan Inc. (IIJ) had explained the essence of General Data Protection Regulation that could be applied to protect data privacy in ASEAN. The key point is relating to the data processing contract and the benefit of data controller, which can benefit from the Binding Corporate Rules (BCRs)

“Therefore, emerging privacy regulations in key countries, particularly regulations on cross-border transfer of personal data pose a tough challenge to globally operating businesses. For global business, using cloud service with approved binding corporate rules (BCRs) is an effective way to demonstrate compliance and mitigate enforcement risk in cross-border data transfer, not only in the EU but also in many other key countries. We are committed to expand global coverage of our BCR-ready cloud solution, GIO, in collaboration with our partners,” stated by Mr. Hirotaka.

The consent is considered to be one of exceptional lawful bases for ad-hoc transfer in GDPR. The EU requires more stable frameworks for routine cross-border transfer as part of regular business process, including Contractual frameworks which are Standard Contractual Clauses (SCCs) and Approved Binding Corporate Rules (BCRs). Mr. Kamata has also comment that currently, IIJ is in the middle of BRCs approval process, if there are no changes, we shall have the approval.

Furthermore, Ms. Nacharie Rujirat, the Managing Director at Leap Solution Asia Co., Ltd., pointed that Leap Solution Asia offers a full capacity cloud service based on a strong underlying infrastructure provided by T.C.C. Technology Group. As our group has taken the personal data privacy protection as our first priority concern. Ms. Rujirat added “Leap Solution is undergoing consulting with IIJ for developing of products and services to address industries’ need according to GDPR.