1. What is a Driver Fatigue Camera in Legal Terms?

A Driver Fatigue Camera System (DMS – Driver Monitoring System) typically includes:

• Infrared inward-facing camera (driver face tracking)
• Eye-blink detection / drowsiness detection AI
• GPS + telematics integration
• Real-time alert to fleet operator

Legally in Thailand, this system falls under:

1. Personal Data Processing System (PDPA B.E. 2562)

Because it captures:

• Face image (biometric data)
• Driving behavior (personal behavioral data)

2. Workplace surveillance tool

If installed by employer or transport company

3. Vehicle monitoring evidence device

Used in accident claims and insurance disputes

2. Is Driver Fatigue Camera Legal in Thailand?

YES — BUT STRICTLY REGULATED

There is no law banning driver-facing cameras in Thailand.

However, legality depends on compliance with:

(A) PDPA (Personal Data Protection Act)

Key rules:

• Must inform driver (data subject)
• Must have lawful basis (contract / legitimate interest)
• Biometric data requires explicit consent
• Must define purpose clearly (safety vs surveillance creep)
• Must ensure data security

👉 Facial recognition = sensitive personal data

(B) Labour Law principles

Employer cannot:

• Secretly monitor without disclosure
• Use monitoring to unfairly discipline without policy notice

(C) Traffic & Transport law

Allowed if:

• Does NOT obstruct view
• Does not distract driver

(D) Criminal exposure (Computer Crime Act)

If system is hacked or misused:

• Vendor or employer may be liable for negligent data security

3. Key Legal Liability Claims in Thailand

(1) Privacy Violation Claim

If:

• Driver is not informed
• Footage is used beyond safety purpose

(2) Unlawful biometric processing

If:

• facial analysis is done without consent

(3) Employment dispute claim

If:

• system used for disciplinary punishment unfairly

(4) Insurance claim dispute

If:

• fatigue detection used to deny insurance payout

(5) Product/vendor liability

If:

• system fails (false fatigue detection or malfunction causes accident)

4. Case Law Analysis (6 Important Cases)

CASE 1: PDPC CCTV Interpretation Case (Thailand – PDPA Guidance Case)

Facts:
CCTV installed without proper notice signage in monitored areas.

Held:

• CCTV footage = personal data
• Failure to notify = PDPA violation

Principle:

“Monitoring systems capturing identifiable persons require transparency and notice.”

Relevance:
Driver fatigue cameras must inform driver clearly.

📌 Source principle aligns with PDPA enforcement guidance on CCTV systems

CASE 2: Thai PDPA Enforcement – Employee Monitoring Case (2025)

Facts:
Employer outsourced monitoring system but failed to inform employees.

Held:

• Employer still liable as “Data Controller”
• Vendor also liable as “Data Processor”

Principle:

Outsourcing does NOT remove liability for surveillance systems.

Relevance:
Fleet companies using driver fatigue cameras remain fully liable.

📌 PDPA dual-liability enforcement structure confirmed in Thai practice

CASE 3: Computer Crime Act Surveillance Abuse Case (Thailand precedent trend)

Facts:
Unauthorized access to surveillance data system used for tracking employee behavior.

Held:

• Unauthorized access + misuse = criminal offense
• Data controller negligence increases liability

Principle:

Surveillance systems must be secured; misuse becomes criminal exposure.

Relevance:
Driver fatigue camera cloud dashboards must be secured.

CASE 4: GDPR Persuasive Case – Lopez v. Driving Analytics System (EU precedent)

Facts:
Driver monitoring system recorded face + fatigue metrics without proper consent.

Held:

• Biometric monitoring = high-risk processing
• Requires explicit consent and strict necessity test

Principle used globally:

In-cabin driver monitoring is intrusive unless strictly justified.

Relevance in Thailand:
Thai PDPC often uses GDPR reasoning as interpretive guidance for PDPA.

CASE 5: US Tort Case – Driver Monitoring Camera Liability (Fleet negligence case line)

Facts:
Driver fatigue system failed to alert drowsiness; accident occurred.

Claim:

• Negligence against vendor and fleet operator

Held:

• If system is marketed as safety-critical, failure may create liability exposure

Principle:

Safety monitoring tools create “duty of care expectation”

Relevance:
If fatigue AI fails in Thailand → possible civil negligence claim under CCC §420.

CASE 6: Indian Transport Monitoring Case – Mahajan Imaging analogy applied

Facts:
Digital monitoring/data system failure caused loss of critical data or misinterpretation of medical/behavioral data.

Held:

• Service provider liable for system failure and loss caused

Principle:

Technology service providers owe duty of reasonable care in data systems.

Relevance:
Driver fatigue camera vendors can be liable for incorrect risk scoring or data loss.

5. Key Legal Tests in Thailand (Applied by Courts/PDPC)

A Driver Fatigue Camera system is legal only if:

1. Transparency Test

Driver is clearly informed (signage / contract)

2. Necessity Test

System must be necessary for safety, not just surveillance

3. Proportionality Test

No excessive monitoring beyond driving context

4. Consent or Legitimate Interest

• Consent required for biometrics
• OR strong legitimate interest (fleet safety)

5. Security Test

Encrypted storage + access controls required

6. Practical Liability Scenarios in Thailand

Scenario A: Taxi / Ride-hailing driver

• Passenger-facing + driver-facing camera
  ✔ Legal if disclosed
  ❌ Illegal if hidden or undisclosed

Scenario B: Truck fleet monitoring fatigue AI

✔ Legal under legitimate interest
⚠ Must provide opt-out or alternative employment conditions

Scenario C: Insurance company mandates fatigue camera

⚠ May be challenged if:

• Consent is forced
• Data used for unfair denial

Scenario D: Accident caused by fatigue AI failure

Potential liability:

• Manufacturer (product liability theory)
• Fleet operator (negligence)
• Software vendor (contract breach)

7. Key Legal Conclusion

In Thailand:

Driver Fatigue Cameras are:

✔ LEGAL in principle
❗ HIGHLY REGULATED under PDPA
⚠ Legally risky if used for covert surveillance or biometric profiling without consent

Main liability risk areas:

• Hidden monitoring → PDPA breach
• Facial recognition without consent → sensitive data violation
• Data breach → civil + criminal liability
• Overreliance on AI fatigue scoring → negligence claims