PDPA Specialist

Key Responsibilities:

• Develop, implement, and maintain the company’s PDPA framework.
• Conduct periodic reviews and audits to ensure adherence to PDPA regulations.
• Serve as the primary point of contact for PDPA-related queries and issues.
• Draft, review, and update data protection policies and procedures to align with PDPA requirements.
• Establish protocols for data access, storage, and disposal to mitigate data protection risks.
• Educate employees on PDPA requirements and best practices through regular training sessions.
• Provide guidance and advice to various departments on data protection obligations.
• Monitor and manage data breach incidents, including investigation, reporting, and mitigation.
• Develop an incident response plan for potential data protection breaches.
• Collaborate with legal, compliance, IT, HR, and other relevant teams to ensure organization-wide compliance.
• Act as a liaison with regulatory authorities and respond to data subject access requests.
• Conduct Data Protection Impact Assessments (DPIA) for new projects, systems, and processes that involve personal data.
• Identify risks and recommend measures to mitigate them effectively.

Qualifications:

• Bachelor’s degree in law or related fields.
• Minimum 3 years of experience in data protection role preferably with a focus on PDPA.
• Familiarity with data protection technologies and tools.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills to interact with diverse stakeholders.
• Ability to work independently and as part of a cross-functional team.
• Good command of Thai and English.