Section 79

Any Data Controller who violates the provisions under section 27
paragraph one or paragraph two, or fails to comply with section 28 ,
which relates to the Personal Data under section 26
in a manner that is likely to cause other person to suffer any damage,
impair his or her reputation, or expose such other person to be scorned, hated, or humiliated,
shall be punished with imprisonment for a term not exceeding six months, a fine not
exceeding Baht five hundred thousand, or both.

Any Data Controller who violates the provisions under section 27
paragraph one or paragraph two, or fails to comply with section 28 ,
which relates to the Personal Data under section 26 in order
to unlawfully benefit himself or herself, or another person, shall be punished with imprisonment
for a term not exceeding one year, a fine not exceeding Baht one million, or both.

The offenses under this section are compoundable offenses.