Your organization spent 18 months getting Thailand PDPA right. You hired consultants, updated policies, trained staff, and submitted your data controller r