Section 83

Any Data Controller who violates or fails to comply with

section 21 , section 22 , section 24 , section 25 paragraph one, section 27 paragraph one or two,
section 28 , section 32 paragraph two, or section 37 , or who obtains consent by deceiving or
misleading the data subject about the purposes, or fails to comply with section 21 which applies
mutatis mutandis according to section 25 paragraph two, or fails to send or transfer the Personal
Data in accordance with section 29 paragraph one or paragraph three, shall be punished with an
administrative fine not exceeding Baht three million.