Shareholder Privacy Notice
A Shareholder Privacy Notice is the document a company uses to tell shareholders, under PDPA Section 23, how it collects and uses their personal data for meetings, dividends and identity checks. This template is for company owners and directors and covers current and former shareholders, proxies and related family members, with 1 template, 1 user guide and a dispute consultation via LINE @kooru.
Both buttons open the secure Stripe payment page (Kooru does not store card numbers) · Questions before you buy? Ask an expert on LINE
The full set of 4 documents totals ฿6,460 · each can be bought separately
| This Word file | AiPDPA | Kooru legal team | |
|---|---|---|---|
| Who fills it in | You do | Generated from your company data | The legal team does it |
| Scope | This document | A full set for your business | Gap Analysis + system set-up |
| Price | ฿490 | See plans ↗ | From ฿5,900 |
For company owners, directors and executives
Your company processes shareholders’ personal data every day, whether it is notifying meetings, transferring dividends, verifying identity or submitting information to the Department of Business Development. These are all “processing of personal data” under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Section 23 requires the company to give the data subject a formal Privacy Notice before or at the time of collection. Failing to comply carries the following penalties:
- Administrative fines of up to 1,000,000 baht for failing to inform data subjects through a privacy notice
- Criminal penalties: imprisonment of up to 1 year and/or a fine of up to 1,000,000 baht (Section 79)
- Civil damages that shareholders may claim directly in court, including punitive damages of up to 2 times (Sections 77–78)
- Reputational damage when the matter is shared on social media
This document is designed to cover every group: current shareholders, former shareholders, proxies and related family members.
The template follows the PDPA standard section by section:
- Purposes of processing with all 6 legal bases
- All 8 data subject rights under the PDPA
- International data transfers with lawful safeguards
- DPO contact channels and the complaint process, as the law requires
More than a template: an organisation-level package
- Comes with an organisation-level user guide, covering everything from customising the document to announcing it for real use in the company
- Free consultation for disputes with Thai lawyers and Barristers-at-Law who have completed DPO training, via LINE @kooru
What you get in this product:
- Shareholder Privacy Notice [PDPA Enterprise Edition] - a standard legal template ready for immediate use, covering every section, reviewed by a lawyer with DPO training - 1 set
- User guide - 1 set
- Register via LINE @kooru to receive a consultation entitlement for disputes
The document files are provided in Thai.
Frequently asked questions
Who does the Shareholder Privacy Notice cover?
It covers current shareholders, former shareholders, proxies and related family members, for processing such as notifying meetings, transferring dividends and verifying identity. Every one of these activities counts as processing personal data under the PDPA, and Section 23 requires the company to give a formal privacy notice before or at the time of collection. The notice sets out all 6 legal bases and all 8 data subject rights, and also covers international data transfers. Failing to inform shareholders can lead to an administrative fine of up to 1,000,000 baht.
How much does the shareholder privacy notice cost?
The Shareholder Privacy Notice costs 490 baht. You receive 1 Shareholder Privacy Notice (Enterprise Edition), 1 organisation-level user guide, and the right to register via LINE @kooru for a consultation in case of disputes. The notice covers current and former shareholders and proxies, with all 6 legal bases, all 8 data subject rights and international data transfers. That one-time cost compares with an administrative fine of up to 1,000,000 baht for failing to inform shareholders as the PDPA requires.
What key sections under the PDPA does the template include?
It includes the purposes of processing with all 6 legal bases, all 8 data subject rights, international data transfers with safeguards, and DPO contact channels and the complaint process.