How-to guides for PDPA, AI, cybersecurity and IP in Thailand The AIPDPA guide library is a set of practical answers to the questions Thai organisations ask most about the PDPA, AI governance, cybersecurity and intellectual property. Each guide opens with a short answer, then gives steps you can act on today, common problems and the sections of law it relies on.
PDPA · personal data · 16 guides
Where do you start with PDPA compliance?
Start by mapping what personal data your organisation collects, why, and on which lawful basis, and record it in a RoPA. Then build the privacy notice, security measures, a channel for data subject requests and a breach response plan. The guides in this section walk through each one in that order.
How can an organisation use AI safely and accountably?
Start with a register of the AI tools your organisation uses and the data they touch. Then give staff a Generative AI use policy, assess the risk of important systems, and build a management system around a standard such as ISO/IEC 42001. If you have customers or users in the EU, check whether the EU AI Act reaches you.
What does Thai law require of organisations on cybersecurity?
It depends on what kind of organisation you are. Service providers must keep computer traffic data under the Computer Crime Act, Critical Information Infrastructure (CII) organisations have duties under the Cybersecurity Act, and state and CII bodies using public cloud follow NCSA guidance. The guides in this section help you work out which duties apply to you.
How can a company protect its intellectual property?
Start by listing the IP your company owns, then close three common gaps: trademarks that lapse because nobody renewed them, copyright in work your employees create, which belongs to the employee unless agreed otherwise in writing, and trade secrets with no measures in place to keep them secret.
Ready to get it done? Handle the core work in AIPDPA
RoPA, 72-hour breach response, data subject requests, cookie consent, 40 ready-to-use documents and AI governance in one system. Modules depend on the plan; see the real thing in the demo account first, no sign-up.
From 2,900 THB/year (11 modules) · all 23 modules from PRO at 9,900 THB/year · demo account, no sign-up
Beyond the AIPDPA platform, our network has lawyers who can set things up for you, ready-made contracts, tech-law news and courses to build your skills.
Done for youKooru Data Shield
A lawyer-led team checks your readiness and sets up PDPA end to end — ideal for SMEs without the time.
