PDPA Legal Consultant

Job Descriptions:

Legal Advisory and Compliance:

• Provide expert advice on the Personal Data Protection Act (PDPA) and other applicable data protection laws.
• Draft, review, and negotiate data protection-related agreements, policies, and contracts.
• Ensure that the organization's data processing activities comply with PDPA and other international data privacy laws (e.g., GDPR).
• Advise on cross-border data transfer mechanisms and legal issues related to privacy.

Policy Development and Implementation:

• Develop and maintain internal policies, guidelines, and best practices to ensure ongoing compliance with PDPA.
• Collaborate with the Data Protection Officer (DPO) to implement data protection frameworks.
• Conduct privacy impact assessments (PIAs) and data protection impact assessments (DPIAs) on new projects or products.

Training and Awareness:

• Provide training sessions and workshops for employees to raise awareness of PDPA compliance and data privacy issues.
• Lead internal educational initiatives on privacy laws and data security practices.

Auditing and Risk Management:

• Conduct regular audits and reviews of data processing activities to identify potential risks and non-compliance areas.
• Develop and monitor risk mitigation strategies to address identified compliance risks.
• Ensure timely reporting of data breaches and liaise with regulatory authorities on PDPA matters.

Data Breach Management:

• Respond to data breaches by leading investigations, advising on incident response, and guiding the organization through remediation steps.
• Report and document breaches in accordance with PDPA requirements.

Stakeholder Management:

• Collaborate with internal teams (legal, IT, HR, marketing) to ensure data protection compliance across departments.
• Act as the main point of contact for privacy inquiries from clients, third parties, and regulatory authorities.

Monitoring Regulatory Changes:

• Keep up to date with changes in privacy legislation, industry standards, and legal trends to ensure the organization’s compliance.
• Advise on legislative developments and how they impact business operations.

Client and Vendor Management:

• Advise clients on PDPA compliance and represent the company in external engagements on privacy matters.
• Review and monitor third-party vendor contracts to ensure they meet data protection obligations.

Requirements

• Bachelor’s or Master’s degree in Law (LLB or equivalent).
• At least 3 years of experience in legal advisory, with a strong focus on data protection, privacy law, or regulatory compliance.
• In-depth knowledge of the PDPA, GDPR, and other international privacy frameworks.
• Certified Information Privacy Professional (CIPP) or Certified Information Privacy Manager (CIPM) certification is an advantage.
• Experience conducting data protection audits, risk assessments, and handling data breaches

Benefits

• ประกันสังคม
• กองทุนสำรองเลี้ยงชีพ
• ประกันกลุ่ม
• ประกันสุขภาพ
• ตรวจสุขภาพประจำปี
• ค่าเดินทาง
• ค่าหอพัก
• สัมมนากลางปี / Outing
• ​โบนัสตามผลประกอบการ