Who is DPO?
A data protection officer (DPO) is mainly responsible for ensuring businesses or organizations comply with the Personal Data Protection Act, B.E. 2562 (2019) (PDPA).
How Important is DPO?
The DPO provides consulting, audit and management services related to personal data protection to ensure effective compliance with the PDPA and reduce the risks of costly litigations and statutory fines.
Why Should We Hire DPO?
The law provides that all covered entities must have a DPO in place;
Providing advice to business owners and their employees on how to act within legal standards;
Ensuring that your internal operations and the collection, use or disclosure of personal data by your employees/service providers comply with the law using appropriate tools such as a Data Protection Impact Assessment (DPIA);
Acting as a point of contact between you and the Office of the Personal Data Protection in case of any PDPA issues e.g. personal data requests or inquiries;
Encouraging your employees to put personal data protection values into practice;
Maintaining confidentiality of any information that becomes known or received by the DPO during the performance of his/her duties.
Covered Entities
Government agencies and state enterprises;
Organizations that need to process a lot of sensitive personal information e.g. hospitals, insurance companies etc.
บริษัทจัดหางาน ห้างสรรพสินค้าที่มีระบบสมาชิก เป็นต้นองค์กรที่ประมวลผลข้อมูลส่วนบุคคลอ่อนไหวเป็นจำนวนมาก
เช่น โรงพยาบาล บริษัทประกันภัย เป็นต้น
DPO Services by PDPA Thailand
✅ Providing advice to data controllers (DC), data processors (DP) and companies’ employees on matters related to the Personal Data Protection Act (PDPA);
✅ Dealing with inquiries, liaising with data owners, and dealing with the requests for the collection, use or disclosure of personal data in accordance with the Personal Data Protection Act (PDPA);
✅ Providing a means for the data owners from both inside and outside the company to report incidents;
✅ Reviewing at least 2 activities on a monthly basis such as the collection and destruction of the data or data breach procedure and including appropriate suggestions in the Report of Processing Activities (RoPA);
✅ Acting as a point of contact between clients and the Office of Personal Data Protection Commission (PDPC) for any issue arising from the collection, use or disclosure of the personal data within the organization;
✅ Reporting any breach of the personal data to the Office of Personal Data Protection Commission (PDPC) within 72 hours on behalf of the clients.
“We understand your business since we have provided
PDPA
consulting services to many listed and private companies”
สอบถามข้อมูลเพิ่มเติม
โทรศัพท์ : 02-029-0707 ต่อ 4-5 /081-632-5918 (คุณปุ๋ม) Email : [email protected]
