FAQ

Any questions about wisework?

Answers to Common Inquiries About Our Services and Solutions

What is PDPA?

The Personal Data Protection Act (PDPA) is a law enacted to protect individuals’ privacy rights in Thailand. It officially came into effect on June 1, 2022. This legislation was established in response to advances in technology and communication, making it easier to violate personal data privacy. Under PDPA, the collection, use, and disclosure of personal data must be done with the data subject’s consent and in accordance with its regulations to prevent harm or inconvenience.

Which businesses must comply with PDPA?

All businesses, including public and private sector organizations that handle personal data in Thailand, must comply with the PDPA. This includes the collection, use, or transfer of personal data. Organizations are required to obtain consent from the data subject before processing any personal information. Non-compliance may lead to civil, criminal, or administrative penalties.

How to get started with PDPA compliance?

To comply with PDPA, follow these essential steps:

1) Appoint a Data Protection Officer (DPO)
2) Train employees on PDPA requirements
3) Conduct Data Mapping
4) Develop a Privacy Policy
5) Review the Lawful Basis for Processing personal data
6) Conduct a Data Protection Impact Assessment (DPIA)
7) Implement a Data Breach Notification system
8) Apply appropriate Technology Controls for data protection

What are the penalties for non-compliance with PDPA?

Non-compliance with PDPA may result in civil, criminal, and administrative penalties. Administrative fines can reach up to 5 million THB, and criminal offenses may lead to imprisonment.

Which businesses need a DPO?

Businesses that handle large volumes of personal data or sensitive data are required to appoint a Data Protection Officer (DPO) to oversee data protection practices.

What data is considered "sensitive"?

Sensitive data includes information such as race, religious beliefs, health records, genetic and biometric data, or any other data that may cause harm or distress if disclosed.

Can wisework provide PDPA consultation?

wisework has a team of experts with experience in over 80+ PDPA consultation projects. We provide consultation, planning, and system implementation to comply with the law. Our team consists of legal and technology professionals who have undergone training and hold international certifications. We guide clients through the entire process, ensuring that all aspects—People, Process, and Technology—are covered.

What standards does wisework follow for risk management?

wisework follows various international standards for risk management, such as ISO 31000 (Risk Management), COSO ERM (Enterprise Risk Management), ISO/IEC 27005 (Information Security Risk Management), NIST 800-30 (Risk Assessment), and others to ensure effective risk management within your organization.

What systems does wisework provide?

wisework has developed a personal data management system compliant with the PDPA, covering essential functions that businesses need. It can be customized to meet the specific needs of your organization and integrates various data sources into a single platform. The system ensures convenience, security, and efficiency, and fully supports the Thai language with over 95% accuracy.

What types of ERP systems can wisework be installed on?

wisework can be deployed on both On-Premise and On-Cloud environments using Microsoft Azure, offering maximum flexibility and continuous high performance. We also offer Hybrid Cloud installations to allow for seamless data access anytime, anywhere, meeting the current needs of modern organizations.

Can wisework integrate with internal software systems?

Yes, wisework can integrate with internal operation or monitoring software to retrieve key data for risk assessment and KRI (Key Risk Indicator) analysis. This helps improve the overall risk management capabilities of your organization.

How does wisework help with risk assessment?

wisework allows organizations to define their Risk Tolerance (RT) dynamically, utilizing multiple Key Risk Indicators (KRI) at the same time. This flexibility helps prioritize and manage risk mitigation actions efficiently.

Can wisework support management processes?

Yes, wisework integrates with an Executive Support System module, allowing effective tracking, reporting, and managing of RTP. Executives can monitor progress and issue commands via a comprehensive Dashboard, ensuring tasks are executed as planned.

Does wisework provide user manuals?

For any questions regarding product usage, feel free to contact us at info@thewiseworks.com.

How can I request a product demo of wisework?

If you are interested in wisework and would like to request a demo, click the “Request Demo” option on our website. Our team will get in touch with you promptly to recommend the most suitable solutions for your business.

What industries can benefit from wisework’s solutions?

Our solutions are designed to be flexible and adaptable for businesses across multiple industries, including finance, healthcare, education, manufacturing, retail, and more. Whether you’re a small business or a large enterprise, wisework helps organizations achieve compliance and manage risks effectively.

What is wisework’s commitment to data privacy and security?

At wisework, we prioritize data privacy and security. Our systems comply with international standards such as ISO/IEC 27001 for information security and the PDPA. We implement robust measures to ensure that your data is always protected and processed securely.

Does wisework offer any employee training or awareness programs?

Yes, wisework provides tailored employee training and awareness programs to ensure your staff understands the importance of data privacy and compliance. These programs help reduce risks associated with human error and enhance the overall security culture within your organization.

What kind of customer support does wisework provide?

We provide comprehensive customer support, including setup assistance, troubleshooting, and ongoing maintenance. Our team of experts is available to guide you through every step, ensuring your system operates smoothly and is always up to date.

How does wisework handle system updates and new compliance regulations?

wisework keeps its systems up to date with the latest regulatory changes and compliance standards. Our team ensures that all clients are informed about updates, and we assist with the implementation of new features or compliance measures to ensure your business remains compliant.

FAQ