Scan your business’s PDPA risk in 8 questions
The PDPA risk scan is a free 8-question check that shows your business’s risk under the Personal Data Protection Act B.E. 2562 (2019) in about a minute. Flip the switch to “Yes” for each statement that fits your business and the console responds instantly. Your answers never leave your device.
- Calculates a risk score
- Shows the relevant sections
- Recommends services with prices
Risk scan results
Start by flipping the first switch on the left
Every statement is a situation commonly found in Thai SMEs. Answer truthfully for the most accurate result.
- Nothing yet · sections will appear when you answer “Yes”
The scan result is a preliminary assessment that gives you a picture of your risks. It is not a legal opinion. For advice on your specific case, an expert will check your readiness for free over LINE and send a Gap Analysis report within 3 business days.
Where do the numbers in the console come from?
Every figure is drawn from the Personal Data Protection Act B.E. 2562 (2019). The console does not guess actual fines; it shows the ceilings set by law: a maximum administrative fine of ฿5,000,000 per case under section 90, which applies to sensitive data; breach notification to the Office of the PDPC within 72 hours under section 37(4); up to 1 year’s imprisonment for misusing sensitive data; and the cross-border and DPO duties in sections 28 and 41.
฿5,000,000 per case
The maximum administrative fine within the group of administrative penalties
Notify within 72 hrs
When a personal data breach occurs, you must notify the Office of the PDPC from the time you become aware of it
Sensitive data
Health, religion, biometric data and more. Misuse carries imprisonment of up to 1 year
Cross-border & DPO
Conditions for sending data abroad, and the duty to appoint a Data Protection Officer