Coming into full effect on 1 June 2022, the Personal Data Protection Act B.E. 2562 (2019) sets out the criteria relating to the protection of personal data that businesses located in Thailand and foreign businesses performing commercial transactions in Thailand must follow. To help businesses mitigate risks of breaching this Act, we provide legal advice in connection with the appropriate preparation for an organization’s PDPA compliance, legal documents implementing the PDPA, and training service regarding this process. We are able to assist with:

• Preparing a data mapping questionnaire on the topic of data collection and data processing for the client’s completion, and based upon the client’s answers, providing advice identifying specific data management practices which may be considered breach of legal standards regulated under the PDPA and proposing measures to be applied by each to increase compliance
• Drafting an internal Data Protection Policy regarding topics including data collection and data processing procedure, data retention period, practice of data transfer, data erasure, and data security measures
• Preparing a Privacy Notice, Cookies Policy, Consent Form and Data Subject Request Forms
• Reviewing and revising client’s documents across various business functions (Human Resources, Marketing and Accounting, etc.) to ensure PDPA compliance
• Suggesting to foreign companies involved in commercial transactions in Thailand as to what revisions to make to existing data privacy policy to ensure local compliance
• Providing customer-specific training service for the implementation of PDPA compliance and appropriate management of personal data, including creating a training manual