Congratulations if your company already collects data privacy consent from your customer/users. But do your company have ROPA in place? ROPA is required under Section 39 of the PDPA as Data controllers are required to prepare and maintain a record of processing activities (“ROPA”) consisting of the minimum information required as follows in order to… Continue reading Data Privacy in Thailand: Congrats you have consent in place but did you forget about ROPA?