PDPA Alert: Personal Data Protection Awareness Activity for Q2/2026

MR. D.I.Y. places importance on personal data protection and raising employee awareness of the proper collection, use, disclosure and handling of personal data. The Company continuously communicates its policies and internal practices to prevent the risk of data breaches and build trust among all stakeholder groups.

In Q2/2026, the Company disseminated “PDPA Alert” communications and awareness materials through internal communication channels to employees at all levels. The communications covered practical topics that employees can apply in their daily work, including guidelines on the use of photos or information related to customers, employees or Company activities by external service providers; the importance of a Data Processing Agreement (DPA) when external service providers process personal data on behalf of the Company; and the principle of collecting only necessary data. The materials also highlighted the importance of informing individuals before requesting data, checking information before receiving documents, and redacting unnecessary information before storage.

These activities promote employees’ ability to handle information accurately, securely, and responsibly. It also helps establish security standards, reduce operational risks and compliance risks, , and encourage employees to serve as the “Human Firewall” as the first line of defense in effectively protecting the personal data of stakeholders.