Further to the Walailak University Announcement on the Personal Data Protection Policy, B.E. 2565 (2022), which took effect on 1 June 2022, the University operates closed-circuit television (CCTV) cameras for surveillance and monitoring within and around office buildings in order to protect life, health and property through the use of such CCTV equipment.

In doing so, the University collects the personal data of officers, staff, students, employees, contractors, service users, visitors, and any other persons entering these areas.

---

Clause 1 — Title

This Announcement shall be called the “Announcement of the Division of Corporate Communication, Walailak University, on Guidelines for the Protection of Personal Data in the Use of Closed-Circuit Television Cameras, B.E. 2568 (2025).”

Clause 2 — Definitions

In this Announcement:

“University” means Walailak University.

“Division of Corporate Communication” means the Division of Corporate Communication, Walailak University.

“Unit” means the Office of the President, schools, colleges, the Graduate School, institutes, centres, divisions, and any other body howsoever named that holds equivalent status to the foregoing.

“Announcement” means the Walailak University Announcement on the Personal Data Protection Policy in the Use of Closed-Circuit Television Cameras, B.E. 2568 (2025).

“Data subject” means personnel, current students, alumni, committee members, working group members, persons appointed by the University, contractors, service users, visitors, or any other person falling within the purposes of the University.

“Personal data” means data concerning a person that enables that person to be identified, whether directly or indirectly.

“Data controller” means a natural or juristic person entrusted by the University with the authority to make decisions regarding the collection, use or disclosure of data.

“Data processor” means a natural or juristic person entrusted by the University to act on the instructions of the data controller.

Clause 3 — Purposes of Collection

The Division of Corporate Communication collects the personal data of data subjects for the following purposes:

1. To protect the health, personal safety and property of data subjects.
2. To protect the University’s buildings, facilities and property.
3. To support the relevant authorities in law enforcement.
4. To assist in disciplinary or grievance proceedings.
5. To assist in investigations or in the referral of complaints.
6. To support civil proceedings, such as legal action relating to employment.
7. Other purposes (if any).

Clause 4 — Legal Basis

The Division of Corporate Communication acts on the following legal bases:

1. Necessity to prevent or suppress a danger to a person’s life, body or health.
2. Necessity for the purposes of legitimate interests.
3. Necessity for compliance with applicable law.

Clause 5 — Installation and Data Collected

The Division of Corporate Communication installs cameras in visible locations, accompanied by notice signage, in order to collect data such as:

• Still images
• Moving images
• Audio
• Images of data subjects’ property
• Other data (if any)

Cameras are not installed in private areas such as toilets, shower rooms, residential rooms and the like.

Clause 6 — Disclosure

CCTV data may be disclosed, where necessary, to the following persons or bodies:

• Authorities with legal powers
• External service providers
• Data subjects exercising their rights under the PDPA

Clause 7 — Rights of Data Subjects

Under the Personal Data Protection Act B.E. 2562 (2019), data subjects have the following rights:

• The right of access, to obtain a copy, and to request disclosure of the source of the data
• The right to request rectification of the data
• The right to request restriction of use
• The right to object
• The right to request erasure, destruction or anonymisation of the data

Clause 8 — Retention Period

Data will be retained for no longer than 60 days, after which it is deleted automatically, or for such period as is necessary under the law.

Clause 9 — Security Measures

Appropriate data security measures are maintained (confidentiality, integrity and availability) in accordance with the Personal Data Protection Policy B.E. 2565 (2022).

Clause 10 — Access Control

Only authorised officers may access the data, and they must comply strictly with this Announcement.

Clause 11 — Contact

For further enquiries:

Division of Corporate Communication, Walailak University 222 Thai Buri Sub-district, Tha Sala District, Nakhon Si Thammarat 80160 Tel. 0 7567 3400 (during official days and hours) Email: dpr@wu.ac.th (please state the subject as “PDPA Enquiry”)

Clause 12 — Amendments

The Division of Corporate Communication may amend these Guidelines as appropriate and will give notice via QR code or other designated channels. Data subjects are asked to monitor such changes regularly.

Clause 13 — Acknowledgement

By entering the area, you are deemed to have acknowledged the guidelines set out in this Announcement. If you do not agree, please refrain from entering the area.

If these Guidelines are subsequently amended and you continue to enter the area, you are deemed to have acknowledged the changes.

---

Announced on  July B.E. 2568 (2025)

(Assistant Professor Dr. Fareeda Je-oh) Acting Head of the Division of Corporate Communication, Walailak University