The STP
Your
Security Tech Partner
About Us
At The STP, we are dedicated to helping our clients navigate the ever-evolving landscape of cybersecurity and ensure that their data is secure and compliant.
With a team of experienced professionals, we specialize in providing expert advice and guidance on PDPA (Personal Data Protection Act) compliance and developing robust IT security policies. Our goal is to assist organizations in mitigating risks, protecting sensitive information, and maintaining trust with their customers.
Why choose us? Our team of cybersecurity experts possesses profound knowledge and vast experience in the field. We stay up-to-date with the latest industry practices and continually monitor emerging threats to keep our clients ahead of potential vulnerabilities. By thoroughly assessing your organization's cybersecurity posture, we provide tailored solutions that address your unique needs.
We understand that cybersecurity is not a one-size-fits-all approach. That's why we work closely with our clients to create customized strategies that align with their business objectives and comply with relevant regulations. Our comprehensive services include risk assessments, policy development, staff training, incident response planning, and ongoing support to ensure that your organization remains proactive and resilient against cyber threats.
Building long-term partnerships with our clients is a fundamental principle of our company. We prioritize clear communication, transparency, and efficiency throughout our collaboration, ensuring that you receive the highest level of service at every stage.
Whether you are a small startup or a large enterprise, protecting your data and maintaining compliance is of utmost importance. Let The STP be your trusted partner in safeguarding your valuable information and establishing a robust cybersecurity framework. Contact us today to learn more about how we can assist you.
​
THAIÂ PERSONAL DATA PROTECTION ACT
Meeting Secondary Requirements
On 20 June 2022, secondary legislation under the PDPA passed, namely:
-
Requirements to maintain appropriate security measures for the Personal Data Controller (only available in Thai here);
-
Criteria and Methods for Organising, making, and keeping records of processing activities (only available in Thai here);
-
Exemption from the requirement of Organising, making, and keeping records of processing activities for Small and Medium Enterprises (only available in Thai here); and
-
Criteria for issuing Administrative fines and orders of the expert committee (only available in Thai here).
Security requirements include using a Risk based approach to determining proper protection, access requirements including limiting access to personal data, monitoring the data for threats and incidents, and protections around changes to the data.
What does all that mean?
Your company needs to understand how data is secured to meet your PDPA obligations.
​
