PDPA Solutions

Cybersecurity, also known as cyber protection is a pressing concern for all organizations. After all, no company wants to be in the news because they are the victim of the latest cyber-attack. This could immense damage to the reputation. With that in mind, it is important to remember that complying with the PDPA and having a professional audit done should not only be done because of threats of penalties from the government and the desire to not be reprimanded by a Data Protection Officer (DPO). The PDPA is specifically designed to protect individuals' personal data and recognizes the need for organizations to collect, use or disclose personal data for legitimate and reasonable purposes. In other words, it is specifically designed to prevent the kind of events that every organization fears. Learn more about how we can help your company comply with the PDPA and prevent cyber breaches from affecting your organization’s data. Cybersecurity, also known as cyber protection is a pressing concern for all organizations. After all, no company wants to be in the news because they are the victim of the latest cyber-attack. This could immense damage to the reputation. With that in mind, it is important to remember that complying with the PDPA and having a professional audit done should not only be done because of threats of penalties from the government and the desire to not be reprimanded by a Data Protection Officer (DPO). The PDPA is specifically designed to protect individuals' personal data and recognizes the need for organizations to collect, use or disclose personal data for legitimate and reasonable purposes. In other words, it is specifically designed to prevent the kind of events that every organization fears. Learn more about how we can help your company comply with the PDPA and prevent cyber breaches from affecting your organization’s data by providing a PDPA diagnostic. Click below to view our price list!

PDPA DIAGNOSTICS A common question is, who is protected under the Thai PDPA? The PDPA is extraterritorial in its scope. This means that even though you do not have an office in Thailand and have not registered your company as a business in Thailand, the PDPA may still apply to you.

Now that the PDPA (Personal Data Protection Act) has come into effect as of June 1st, 2022, companies in Thailand need to make sure that they are in compliance. The law is very specific in its provisions and has extremely stiff penalties for non-compliance, including fines of up to 1 million baht and up to one year of imprisonment. However, companies should not panic if they are not yet in complete compliance. The newly formed Personal Data Protection Commission, the government agency tasked with enforcement, has indicated that if companies did not intend to commit wrongdoing, they will not be subject to fines or prison time for infractions during a one-year grace period. Instead, the commission will issue warnings to violators and encourage them to comply with the new statute.

According to a survey conducted by the Thai Board of Trade, only 8% of the 4000 businesses interviewed said that they were in full compliance with the law. Furthermore, 31% percent indicated that they haven't even started the process of compliance. Don’t sweat it if your organization is currently in this category! PDPA Solutions, a joint venture between Asia Data Destruction (Data Destruction), Belaws (Legal), Breachunt (Cybersecurity ) and Lim & Partner (HR) can put our expertise in each of a company's respective areas of the business to work and can help you comply with the PDPA. We offer PDPA compliance diagnostic auditing and consulting for your peace of mind regarding PDPA. Our process includes but is not limited to:

Investigating and analyzing the entire organizational structure and internal procedures under PDPA framework

Providing Gap analysis report and data mapping

Review of Data Storage, Destruction, and Protection

360° Internal and External network security evaluation

Providing PDPA guidelines tailored made to your business