Enforcement Rules of the Personal Data Protection Act Article 25

"Dedicated personnel", as referred to under Article 18 of the PDPA, shall mean personnel with the ability to manage and maintain personal data files and to adequately perform the regular task of securing and maintaining personal data and the files thereof for the agency.To equip the dedicated personnel with the ability to secure and maintain personal data, the government agency shall hold relevant professional training sessions or ensure that the dedicated personnel undergo such professional training.