Governs the collection, use, and disclosure of personal data by organisations in Thailand.
12
Rules extracted
180
Obligations decomposed
15.0x
Avg obligations per rule
🇹🇭 Thailand
Jurisdiction
The Thailand PDPA was enacted in 2019 (B.E. 2562) and became fully effective on 1 June 2022 after several deferrals. The Act establishes comprehensive data protection obligations including consent requirements, lawful bases for processing, protections for sensitive data, data subject rights, controller and processor obligations, DPO requirements, cross-border transfer restrictions, and enforcement through the Personal Data Protection Committee (PDPC). The PDPA prescribes civil, criminal and administrative penalties, with administrative fines up to THB 5 million. The Act applies to data controllers and processors collecting, using or disclosing personal data within Thailand, regardless of whether the collection, use or disclosure occurs in Thailand.
Source
1
Regulation
Extracted
12
Rules
Decomposed
180
Obligations
Decomposition ratio
Each rule is decomposed into an average of 15.0 atomic obligations — the smallest testable units that can be independently violated.
Fully extracted & scored
All 180 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.
Every obligation in PDPA is scored across independent risk dimensions:
Obligation Weight
How critical within the regulatory framework
Violation Likelihood
How often breached in practice
Enforcement Evidence
Regulator enforcement history and penalties
Cascade Dependency
How many obligations depend on this one
Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for PDPA — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.
High-level commitments and governance framework covering PDPA requirements.
Step-by-step operational procedures to implement each policy commitment.
Ready-to-use forms, registers, and checklists for day-to-day compliance operations.
Combine PDPA with other regulations into a single unified compliance pack for your business.
Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.
Your document is scored against every obligation in PDPA. Each claim is mapped to the obligation tree and evaluated for coverage.
Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.
16 rules, 260 obligations
9 rules, 135 obligations
29 rules, 203 obligations
10 rules, 32 obligations
10 rules, 41 obligations
19 rules, 200 obligations
46 rules, 572 obligations
8 rules, 201 obligations
Upload your document and get a risk-scored gap analysis against 180 PDPA obligations in under 5 minutes.