Overview

• On August 1, Thailand’s Personal Data Protection Committee fined a private hospital 1.21 million baht and its contractor 16,940 baht for leaking over 1,000 confidential medical files used as street-food wrappers
• Investigators found that a small family business hired to destroy records retained the documents at home and failed to notify the hospital before they entered public circulation
• This action marks the sixth enforcement case under Thailand’s Personal Data Protection Act since it took full effect in 2022
• In June, North Delhi’s Sant Parmanand and NKS Super Speciality hospitals confirmed hacking attempts that accessed sensitive patient records and billing information
• India’s Digital Personal Data Protection Act, 2023 grants patients rights over their health data and allows regulators to levy fines up to ₹250 crore for security failures