Data & Cybersecurity

ichaivej International Hospital Group prioritizes personal data protection and information security by integrating cybersecurity risk management into its corporate strategy, strengthening proactive monitoring, and reporting zero material data leakage incidents in 2025. 

Trust is a core foundation of the healthcare business. The Group therefore places strong emphasis on personal data protection and information security, and treats data governance and cybersecurity as an integral part of its broader risk management and corporate governance framework.  

The Group has established relevant policies to guide governance and operational practices, including: 

• Personal Data Protection Policy

• Information Security Policy

Governance and Key Measures 

The Group integrates cybersecurity risk management into its corporate strategy in order to strengthen preparedness to prevent, detect, and respond to information technology risks on an ongoing basis. Key measures include: 

• Establishing written policies and practices on data protection and information security  

• Reviewing the Information Security Policy at least annually, or when significant changes occur  

• Defining clear responsibilities for management, users, and relevant external parties  

• Communicating policies and training new employees to ensure proper compliance  

• Strengthening proactive monitoring and information security control measures  

2025 Performance 

In 2025, the Group reported zero material data leakage incidents and continued to strengthen its proactive monitoring and control measures throughout the year, reflecting the effectiveness of its preventive approach and incident readiness.  

At the oversight level, management places importance on information technology risk and personal data security, while the Audit Committee continues to monitor compliance with relevant laws, including the Personal Data Protection Act (PDPA).  

The Group remains committed to building digital trust through structured personal data protection and information security management, supported by clear oversight, proactive measures, and regular policy review. This helps ensure that information entrusted to the Group by patients and stakeholders is managed appropriately, securely, and responsibly over the long term.