Many companies still don’t have a DPO or a team dedicated to data privacy tasks.

Despite being an explicit regulatory requirement, 60% of responding companies haven’t yet appointed a Data Protection Officer (DPO) responsible for privacy in their organisation. And almost 1/3 of respondents said they still don’t have a team dedicated to data privacy tasks.

Because of limited in-house data privacy resources and challenges with PDPA implementation and interpretation, most companies (74%) reported they’ve engaged or plan to engage external support for their compliance efforts. This is also supported by the survey results, in which 26% said that hiring consultants was the second largest component of their PDPA budget.

_Questions:

_{Has your company appointed a Data Protection Officer?}
_{In your company, how many employees are dedicated tasks related to data privacy?}
_{What is your company’s approach to implementing PDPA-related work?}
_{What is the largest component in your PDPA implementation budget?}

_{Source: PwC Thailand’s PDPA survey 2020}