Nawarat K.

I hold an LL.B. from Ubon Ratchathani University (UBU) with emphasis on insurance law and data privacy, and earned a Master's degree in Digital Law from UTCC. My career began in the insurance sector at Viriyah Insurance, where I handled litigation, contracts, compliance, and dispute resolution. I subsequently moved into legal consulting at Ragnar Corporation, specializing in PDPA compliance, DPIAs, data transfers, and breach responses.

Currently, as Senior Privacy Officer at T.C.C. Technology (TCC Group), I lead the implementation and enforcement of comprehensive PDPA compliance frameworks, overseeing policy development, conducting audits, and delivering training programs to ensure seamless integration of data privacy principles and full adherence to regulatory standards.

-Conduct awareness training on the Personal Data Protection Act (PDPA) for employees across the organization, ensuring all departments can correctly comply with data protection requirements.

-Interview representatives from various business units within the organization to create the Record of Processing Activities (RoPA).

-Draft and review documentation related to compliance with the Personal Data Protection Act (PDPA).

-Analyze and address vulnerabilities in personal data protection compliance operations to identify and reduce data security risks.

-Support the collection of critical information during data breach incidents and handle data subject rights requests.

-Serve as an in-house privacy expert, providing guidance on PDPA compliance to all departments within the organization.

-Develop and maintain privacy frameworks, policies, and procedures within the organization to align with PDPA requirements.

Master of Laws (LL.M.) in Digital Law (Currently Pursuing)

University of the Thai Chamber of Commerce (UTCC)

Bachelor of Laws (LL.B.)

Ubon Ratchathani University