Per Thailand PDPA B.E. 2562 (2019) Sections on scope + lawful basis + notice. Requirements include (a) determine scope including Extra-territorial Application - PDPA applies to processing of personal data of Thai data subjects even by controllers/processors outside Thailand + (b) establish Lawful Basis for Processing including consent + contract + legal obligation + vital interests + public interest + legitimate interests + (c) provide Privacy Notice to Data Subjects covering identity of controller + purposes + categories + recipients + retention + rights + transfer + (d) document applicability assessment + lawful basis + (e) maintain change management for notice and lawful basis updates + (f) align internal definitions and policies with PDPA Thailand and PDPC guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.