RoPA Pro Template: Record of Processing Activities
The RoPA Pro Template is a Record of Processing Activities that a data controller must keep and be able to present under PDPA Section 39, with 55 columns across 8 categories, dropdown validation and support for general (Section 24) and special-category (Section 26) data. It is for organisations of any size, can be completed within one working day and includes a step-by-step Thai user guide.
Both buttons open the secure Stripe payment page (Kooru does not store card numbers) · Questions before you buy? Ask an expert on LINE
The full set of 4 documents totals ฿6,460 · each can be bought separately
Use together · from the Kooru network
| This Word file | AiPDPA | Kooru legal team | |
|---|---|---|---|
| Who fills it in | You do | Generated from your company data | The legal team does it |
| Scope | This document | A full set for your business | Gap Analysis + system set-up |
| Price | ฿1,490 | See plans ↗ | From ฿5,900 |
Does your organisation have a RoPA that meets the law?
Every day without a complete and correct Record of Processing Activities (RoPA) leaves your organisation exposed to legal, financial and reputational risk.
Risks you may be overlooking: The Personal Data Protection Act B.E. 2562 (2019) (PDPA) is now fully in force. Section 39 states that every data controller, large or small, must keep a written RoPA and be able to present it at any time. For failing to keep a record, or keeping an incomplete one, the administrative fine is up to 1,000,000 baht. This is in addition to criminal penalties and the civil damages that data subjects can claim (punitive damages of up to 2 times). An organisation’s reputation can be damaged overnight, and foreign partners that value GDPR standards may reconsider cooperation if the organisation has no verifiable evidence of PDPA compliance.
What to expect from enforcement: The Office of the PDPC has begun enforcing the law in earnest. A single complaint from a customer or a dissatisfied former employee can lead to an inspection of the whole organisation. When you are asked for your RoPA, you must be able to present it at that point, with no time to hire a lawyer in a hurry, and the committee can order you to fix the gaps within a set deadline.
A complete solution designed for your organisation: The RoPA Pro Template covers every requirement of Section 39 with 55 columns across 8 categories, automatic dropdown validation and a step-by-step user guide written specifically in Thai. It fully supports both general data (Section 24) and special categories of data (Section 26). It can be completed within one working day, even without a legal background.
A RoPA that is complete and current is the document to have ready, given the administrative fine of up to 1,000,000 baht for failing to keep records.
What you get in this product:
- RoPA Pro Template - complete record of processing activities under PDPA Section 39, with a guide and legal advisor - 1 set
- User guide - 1 set
- Register via LINE @kooru to receive a consultation entitlement for disputes
The document files are provided in Thai, and the user guide is in Thai.
Frequently asked questions
How is the RoPA Pro Template structured?
The RoPA Pro Template is a spreadsheet with 55 columns in 8 categories that covers the requirements of PDPA Section 39. Automatic dropdown validation keeps entries consistent, so each processing activity is recorded in the same format. It supports both general data under Section 24 and sensitive data, and comes with a step-by-step user guide in Thai. The structure is designed so an organisation can show a complete, written RoPA whenever the PDPC asks for it.
How much does this RoPA template cost?
The RoPA template costs 1,490 baht. You receive 1 RoPA Pro Template, 1 user guide, and the right to register via LINE @kooru for a free initial consultation from lawyers and Barristers-at-Law who have completed DPO training. The template has 55 columns in 8 categories with automatic dropdown validation, covering PDPA Section 39. By comparison, not keeping a RoPA or keeping an incomplete one can lead to an administrative fine of up to 1,000,000 baht.
Does a small organisation have to keep a RoPA?
Yes. As stated in the document, Section 39 of the Personal Data Protection Act B.E. 2562 (2019) requires every data controller, large or small, to keep a record of processing activities. The record must be in writing and ready to show whenever it is requested. Not keeping a RoPA, or keeping an incomplete one, can lead to an administrative fine of up to 1,000,000 baht, and a single complaint from a customer or former employee can trigger an inspection. A template with a step-by-step guide lets a small team prepare it without extra legal staff.