The Corporate Governance and Compliance Unit is a division under the Company Secretary and Corporate Governance Department and operates in accordance with the Corporate Procedure: Compliance Process. The unit is responsible for compiling and keeping track of laws relevant to GSPC’s business operations and reviewing relevance and compliance in order to ensure all personnel strictly comply with applicable laws and regulations. The unit oversees annual audits and reports any inconsistencies detected to the Chief Executive Officer of the unit for acknowledgment so that they can establish rectification measures and timeframes suitable for the risk level. In addition, all audit results and rectification outcomes are reported to executives and board of directors for acknowledgment and oversight.
The procedure applies to all personnel, and any non-compliance or ensuing damage will result in disciplinary action in accordance with GPSC group’s regulations.
Currently, the Corporate Governance and Compliance Unit uses a Compliance Monitoring Ssystem (CMS) to support ensure legal and regulatory compliance. All applicable laws and regulations are registered in CMS, with the relevant compliance requirements and implementation processes.
Through CMS, the Corporate and Legal Compliance Unit coordinates with relevant business units to monitor and ensure compliance with applicable laws and regulations.
The CMS supports the identification, monitoring, and management of legal and regulatory compliance obligations across the Company.
During the reporting year, GPSC continued to strengthen compliance with the Personal Data Protection Act B.E. 2019 (PDPA) and closely monitored relevant regulatory developments. The Corporate and Legal Compliance Unit conducted a PDPA compliance review within all relevant units. It was found that GPSC operated in full compliance with the law and sought consent from data owners in all data processing activities where consent was required and following up on reports of various breaches.
In addition, the Corporate Governance and Compliance Unit has organized email communications and E-learning training for employees on compliance with the corporate procedure, procedures for compliance with relevant laws and regulations and the management of personal data under the PDPA.