(Unofficial Translation) No. 136 Chapter 69 Gor Government Gazette 27 May 2019 Section 57 There shall be a Secretary-General who is appointed by the commission supervising the Office of Personal Data Protection Committee and the SecretaryGeneral has the duty to administer the affairs of the Office. The appointment of the Secretary-General in paragraph one shall be made in accordance with the rules and methods of recruitment, as prescribed by the commission supervising the Office of Personal Data Protection Committee. Section 58 qualifications as follows: A person to be appointed Secretary-General must have the (1) being of Thai nationality; (2) being not lower than thirty-five years old but not over sixty years old; (3) having knowledge, skills and experience in the areas related to the mission of the Office and administration; Section 59 Any person holding any of the following prohibiting characteristics shall not be Secretary-General: (1) being bankrupt or having been dishonestly bankrupt; (2) being an incompetent or quasi-incompetent person; (3) having been previously imprisoned by final court judgement, regardless of whether there was actual punishment of imprisonment, except for an offences committed by negligence or a misdemeanors; (4) being a civil official, staff, or employee of government agency, or state enterprise, or other governmental organization, or local official agency; (5) being or having been previously an official politician, a person holding political position, a member of the local assembly, or in a management position of local administration, unless having been discharged from his or her office of not less than one year; (6) being or having been previously a director, or other political position in a political party, or an officer of the political party, unless having been discharged from his or her office of not less than one year; (7) having been previously dismissed, fired, or discharged from an official position or any other previous organization on grounds of dishonest performance of duties or severe wrongful conduct; (8) having been discharged on grounds of not passing the performance evaluation in accordance with section 62(4); (9) being a direct or indirect interested person in the Office's related business. Section 60 The Secretary-General shall hold office for each term of four years and may be reappointed. However, the Secretary-General shall not hold office more than two terms. Not less than thirty days but not over sixty days before the end of the office term of the Secretary-General or within sixty days from the date that the Secretary-General vacates office before the end of the office term, the commission supervising the Office of Personal Data Protection Committee shall appoint a selection committee to select a new SecretaryGeneral. The selection committee shall nominate not more than three appropriate persons to 24

Select target paragraph3