Thailand's Computer Crime
Total Page:16
File Type:pdf, Size:1020Kb
Danuvasin Charoen Thailand’s Computer Crime Act: Security vs. Freedom of Expression Danuvasin Charoen* In the Summer of 2012, two independent decision makers sat in their respective off ices on opposite sides of the globe, attempting to determine the best course of action with respect to the Computer Crime Act (hereinafter referred to as “the Act”) that the Thai government had promulgated in 2007. The Act had been motivated by the growing concern over computer and Internet crimes, but had met mixed reactions from various interest groups, including domestic and foreign Internet f irms and political camps. On one side of the decision was Mr. Thomas Dungen, chief executive off ice (CEO) of Fatbook.com, who was trying to decide whether to launch a Thai version of his increasingly popular social website. There was no question in his mind but that the need and market potential existed and that there would be a low breakeven point and a correspondingly high return on investment -- f inancial outcomes that would benef it the f irm tremendously as the day approached when he and his collaborators opted to take the company through an initial public offering (IPO). His uncertainty and hesitation were attributable to his concern that that the Act spread liability for infractions rather broadly. That is, the internet service provider could be -- and in one recent instance, had been -- held jointly liable with those who were directly responsible for committing a particular offense under the Act. This provision, Dungen felt, had the potential to * This case study was written by Dr. Danuvasin Charoen, Assistant Professor of Management Information Systems and Technology, Graduate Faculty of Business Administration at the National Institute of Development Administration (Thailand) and is based archival research. NIDA cases are developed solely as the basis for class discussion, and are not intended to serve as endorsements, sources of primary data, or illustrations of effective or ineffective administrative or managerial practice. Copyright © 2012 National Institute of Development Administration and Dr. Danuvasin Charoen. To order copies or request permission to reproduce materials, call 02-727-3935 or go to http://www.nida. ac.th. No part of this publication may be reproduced, stored in a retrieval system, used in a spreadsheet, or transmitted in any form or by any means – electronic, mechanical, photocopying, recording, or otherwise – without the permission of the National Institute of Development Administration. Vol. 5 No. 1 (January-June 2013) NIDA Case Research Journal 67 Thailand’s Computer Crime Act: Security vs. Freedom of Expression cause the company a lot of grief. Were his f irm to launch a Thai Fatbook and later learn that an employee or a user stood accused of violating the Act, not only would the f irm face a public relations nightmare, but possible suspension of the f irm’s permission to do business in Thailand, along with the prospect of prison time for whomever the authorities determined to be liable for the violation of the Act. Dungen found the decision a particularly diff icult one to make. On the one hand, the opening of a Thai Fatbook held the always welcome promise of handsome f inancial gains from additional advertising revenues, along with increased popularity and prestige that would attract even larger numbers of users, thereby yielding a larger base to factor into advertising charges and, in essence, set up a kind of “virtuous cycle.” On the other hand, the prospect of later f inding himself and his f irm accused of having run afoul of certain provisions of the Act due to some website user’s actions or inactions and thereby being obliged to defend both his f irm and himself personally from criminal prosecution – this was a prospect of unknowable probability that continued to give Dungen great pause. As an entrepreneur of the f irst order, he appreciated that business gain was always predicated on the taking of a calculated risk. But, he wondered, were the risks in this instance really worth the potential gain? Meanwhile, at Government House, the seat of the Thai government in Bangkok, Thailand, the Prime Minister, Yingluck Shinawatra, was wrestling with an equally diff icult decision — i.e., whether to put her government squarely in favor of rescinding the Act (as some stakeholders were demanding) or in favor of leaving the Act as it was (as other stakeholders were insisting). In common with Dungen, who was wrestling with a different but interrelated facet of the issue in his off ice half way across the globe, the prime minister was f inding that the decision as to which way to go was no easy task, not the least because there were powerful and inf luential forces on both sides of the issue. Arrayed in opposition to the law was an amalgam of interests that were convinced that the Act was a serious affront and impediment to freedom of expression and other values deemed essential to the nurturance and preservation of a democratic society. Further, certain political voices within the anti-Act camp were convinced that some provisions of the Act lent themselves to abuse in that they were subject to being used as weapons against upstart political forces that the traditional power centers perceived as threats. These groups were steadfast in the belief that for Thai democracy to take root and f lourish, it was of paramount importance that the right of the people to express their views on all manner of issues not be squelched through laws threatening severe retribution. NIDA Case Research Journal Vol. 5 No. 1 (January-June 2013) 68 Danuvasin Charoen In addition, among other sub-groups were foreign business interests such as Fatbook who, although not directly engaged in attempts to inf luence government policy on the matter, were nonetheless accustomed to doing business in environments with less draconian laws governing the uses of advanced communication technology, such as the Internet. These groups not only represented potential new foreign investment, but also avenues by which Thailand’s stature as a “technology-ready” society, making maximum use of advanced communication technology, could be enhanced. Other inf luential and powerful interest groups, however, had taken a decidedly different position on the Act. For example, the all-important military establishment and their allies in the royalist camp were adamant in their position that the Act was not to be touched. For a variety of reasons, they deemed the law – in particular, its lese majeste provisions -- an important means by which to preserve the essential underpinnings of the Thai state and society. Because of the military’s well-known past tendency to employ extra-political means to enforce its views, Prime Minister Shinawatra knew that, quite likely, military personages would be carefully monitoring any actions that she might take concerning the disposition of the Act. Indeed, if she needed any reminder of how decisively the military could act when it felt that a government was proceeding in the wrong direction, the military’s dissolution of the government of her elder brother (Thaksin Shinawatra) in September 2006 was a poignant and ever-present reminder. Keywords: Computer Crimes, IT Security, Computer Crime Act, Freedom of Expression on Internet Vol. 5 No. 1 (January-June 2013) NIDA Case Research Journal 69 Thailand’s Computer Crime Act: Security vs. Freedom of Expression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ase Research Journal Vol. 5 No. 1 (January-June 2013) 70 Danuvasin Charoen F( 7@(4--#71;+4S;F-M7&@-= FN7; -'1;"1,;--%S;="F>N,1:'7+=1F#7- 2+>7'::'G/'%/H%3%>N7;-@G-4S;5-:';-G4"1;+="F5M%>NJ+F5+;4+ '7=F%7-FM# F( AI5'-=;-4:+77J/J+4;+;-$1'@+AII;-G4"1;+ ="F5M#;LJ"7;>O'-=3:%M,:+>1;+F4>N,%;5+;,I->%>NAI-%S;1;+="; %; F-;5+;,'::'I5A(-7';-#7+>41I;--:'="G/-:'H%3"1, ;,H%+:49 S;/:-@="1;/S;J-%>NF="?OI(-F%2J%,@+;#71;+F4>N,%;5+;, %>N7;F="?OJ" IF">,1:A%>N#7#:"4=I7>7;4;1,=N/:3=1:#-;,-: +#->5= G- %>N#7#:"4=I1;1-+>;-GJ -'1;"1,;--%S;="F>N,1:'7+=1F#7- 25-7J+;-#:"4=I>OJ+;,F/,FN7;I-: ';/F7M+>1;+F5MG'F( 47 5?N+71;5+;,>OF( F-N7+75/:I;-'::'I5+;,%>NF>N,17:'7;;--+ 7+=1F#7-7;>O5+;,>O,:I@+-71;++:N7-: G/4$;':5/:7(-F%2 -1+$? 4$;':2;4;G/-+5;3:#-=,4S;5-:'7> 5?N+71;5+;,>O%S;I5(-F%2+> *;/:3%>NJ+">I4;,#;7#;;#= H",F;7,;,=N7-%>NF>N,17:'4=%&=+@3, +71;5+;,>O/="-74=%&=O