Companies face heightened risks as the prevalence and severity of cyber-attacks across the world continues to rise. The potential for both financial and reputational damage caused by these attacks has led to many companies reevaluating their operations to minimize risk and exposure. In addition, the Thai Cabinet has approved the Personal Data Protection Bill, which would impose strict obligations on organizations regarding the collection, use, disclosure, and transfer of personal data, and implement harsh penalties for noncompliance.