The Data Protection Officer, or DPO, is the Personal Data Protection Officer. According to the Personal Data Protection Act, B.E. 2562, there is a duty to advise organizations and employees to comply with the law, to verify that the organization's operations are in accordance with legal requirements, and to coordinate with the Office of the Personal Data Protection Committee on behalf of the organization.

Your company must appoint a DPO if it falls into any of the following categories.

• You are a public authority.

• Your company’s activities consist of processing operations which require regular and systematic monitoring of a large scale of personal data.

• Your core activity concern collection, use or disclosure of sensitive personal data, such as Health data, Racial or ethnic origin, Genetic data, Biometric data, and Religious or philosophical beliefs, etc.

According to Section 41 of the Personal Data Protection Act 2019, organizations are permitted to employ outsourced DPO services. The Personal Data Protection Officer may be an employee of the organization or a contractor providing services under a contract with the organization.

​

There are various advantages of having an in-house DPO. For example, an in-house DPO is well knowledgeable about organizational culture and work processes.

​

However, DPO is a role that must be independent to appoint or promote internal workers to DPO positions. It is difficult to acquire expertise and experience in personal data protection law in Thailand, because The Personal Data Protection Act, or PDPA, is recently used in Thailand. Therefore, outsourced DPO service is a practical, simple, and highly effective option.

Alphasec is an internationally recognized DPO accredited specialist, having passed national and international personal data protection training and obtained CIPP/E, CIPM, CIPT, CEPAS DPO, CISSP, CISA, CISM, etc.

• Alphasec's DPO team consists of lawyers, IT professionals, and security specialists. As a result, this can confirm that your organization will effectively comply with law and IT protection law.  

• Our service is flexible and adaptable to your organization's needs. For example, if your organization has an in-house DPO, we can assign a consultant to provide suggestions.

• Alphasec can save your organization time and budget by not having to recruit or train in-house DPO.

• There is a guarantee from Personal Indemnity, or "PI," in the event of damage from Outsourced DPO.

Failure to comply with the requirements of the Personal Data Protection Act 2019 can result in fines of up to 5 million baht or more, as well as imprisonment for up to one year for the organization's director.

​

DPO is an important role for organizations with a large amount of personal data. Nowadays, it is not convenient to recruit DPOs due to DPO limitations and rising headcount costs. As a result, choosing Outsourced DPO is the most convenient option for your organization.