Principally, the Personal Data Protection Act B.E. 2562 (PDPA) generally imposes an obligation on provision of records of processing activities (RoPA) to … Continue reading “Small Organizations” who are Data Controllers and/or Data Processors being eligible for exemption from the obligation to provide RoPA, are clearly defined by the PDPC of Thailand