Personal Data in the Use of CCTV

Personal Data Processing Notice for CCTV Use
Bangkok Hospital Khon Kaen Co., Ltd.

1. About Us
Bangkok Hospital Khon Kaen Co., Ltd.
Address: 888 Moo 16, Nai Mueang Subdistrict, Mueang District, Khon Kaen Province 40000
Website: www.bangkokhospitalkhonkaen.com

Our hospital provides medical examination, treatment, and healthcare services. We act as the data controller under the Personal Data Protection Act B.E. 2562 (2019). This document informs you about the purposes and methods of collecting, using, or disclosing your personal data, and explains your rights as a data subject.


2. Purpose of Data Processing
CCTV is used to capture video footage of individuals for the following purposes:

  • To prevent or mitigate risks to life, body, or health, such as criminal activities.

  • For legitimate interests of the hospital or other persons/legal entities, such as responding to emergencies, unusual incidents, or hazardous events.


3. CCTV Locations
The hospital operates 116 CCTV cameras, installed both inside and around the hospital premises.


4. Retention Period

  • CCTV footage is recorded 24/7 and automatically deleted every 30 days.

  • In case of an incident requiring investigation by state authorities, the footage may be retained until the investigation concludes.

  • If the footage is required for court proceedings, it will be retained until the legal process concludes.


5. Security Measures
We safeguard personal data using organizational and technical measures that meet legal requirements and are appropriate to prevent unauthorized access.

Access to CCTV footage is strictly controlled:

  1. Submit a CCTV data request form.

  2. The form is reviewed and approved by a supervisor.

  3. Security personnel in the CCTV control room manage the request.

  4. Authorized viewing requires the presence of a Security Supervisor and CCTV personnel.

  5. All viewing and investigation results are documented and submitted to the responsible security manager.

  6. Police requests require written approval from the hospital director.


6. Sharing CCTV Data with Third Parties

  • Data may be shared with state authorities only if formally requested in writing and for investigation or legal proceedings.

  • Authorized CCTV vendors may access the system for maintenance only and must comply with approved personal data security standards.


7. Your Rights
As a data subject, you have the following rights under the law:

  • Right to Withdraw Consent – Withdraw previously given consent for personal data processing.

  • Right of Access – Access your personal data and request copies.

  • Right to Rectification – Request correction or completion of inaccurate or incomplete data.

  • Right to Erasure – Request deletion of your personal data under certain circumstances.

  • Right to Restriction of Processing – Request temporary suspension of personal data use.

  • Right to Data Portability – Request transfer of your personal data to another data controller or yourself.

  • Right to Object – Object to the processing of your personal data for specific reasons.

To exercise any of these rights, please contact our Data Protection Officer (DPO) at:
Email: [email protected] 
Phone: 043-042-888

Download the full Personal Data Processing Notice for CCTV Use.