Governance and Economic
31 March 2026

PDPA Alert: Personal Data Protection Awareness Activity for Q1/2026

MR. D.I.Y. places importance on personal data protection and raising employee awareness of the proper collection, use, disclosure and handling of personal data. The Company continuously communicates its policies and internal practices to prevent the risk of data breaches and build trust among all stakeholder groups.

In Q1/2026, the Company disseminated “PDPA Alert” communications and awareness materials through internal communication channels to employees at all levels. The communications covered practical topics that employees can apply in their daily work, including protecting customer data and refraining from sharing data through personal communication channels; verifying recipients and attachments before sending information; controlling data access rights based on job roles and responsibilities; setting secure passwords; maintaining workplace security; and classifying data according to its level of sensitivity.

These activities promote employees’ ability to handle information accurately, securely, and responsibly. It also helps establish security standards, reduce operational risks and compliance risks, and encourage employees to serve as the “Human Firewall” as the first line of defense in effectively protecting the personal data of stakeholders.