PDPA — Thai Personal Data Protection Act
Thai PDPA follows a consent-forward model with cross-border transfer conditions. For Thai rice-belt coverage, Phoeniks separates aggregated production intelligence from any personally identifiable land-holder record and applies transfer controls before data leaves the region.
- Thailand
- Personal data processing tied to Thai agricultural land and rice production records.
- 3
- 1
Lawful basis, frequently consent, with clear notice.
Conditions on cross-border transfer of personal data.
Data-subject rights and breach notification.
Who it applies to#
Personal data processing tied to Thai agricultural land and rice production records.
Core obligations#
- Lawful basis, frequently consent, with clear notice.
- Conditions on cross-border transfer of personal data.
- Data-subject rights and breach notification.
What Phoeniks contributes#
- Aggregation-first modelling for rice production analytics.
- Transfer controls and residency options for Thai data.
- Auditable record of which sources contributed to a Thai assessment.
Frequently asked
- Does Phoeniks transfer Thai data abroad?
- Only under the transfer conditions the PDPA allows and the contractual terms agreed with the client. Aggregated, non-personal production intelligence is not subject to those restrictions.
Related pages
EUDR — EU Deforestation Regulation
Operators and traders placing cattle, cocoa, coffee, oil palm, rubber, soya or wood on the EU market. How Phoeniks supplies source-attributed farmland and yield evidence against EUDR obligations.
CSRD — Corporate Sustainability Reporting Directive
Large EU companies and listed SMEs reporting under ESRS, including value-chain impacts on land use. How Phoeniks supplies source-attributed farmland and yield evidence against CSRD obligations.
SFDR and PCAF — sustainability disclosure and financed emissions
Financial market participants disclosing principal adverse impacts, and lenders measuring financed emissions in agriculture. How Phoeniks supplies source-attributed farmland and yield evidence against SFDR / PCAF obligations.
GDPR and the EU AI Act
Processing of personal data in land records, and transparency duties where model output informs decisions about people. How Phoeniks supplies source-attributed farmland and yield evidence against GDPR / EU AI Act obligations.
SOC 2 — security and availability controls
Vendor security review for institutions procuring a data or analytics platform. How Phoeniks supplies source-attributed farmland and yield evidence against SOC 2 obligations.
LGPD — Brazilian data protection law
Processing of personal data relating to Brazilian rural properties and their holders. How Phoeniks supplies source-attributed farmland and yield evidence against LGPD obligations.
DPDP — India Digital Personal Data Protection Act
Personal data of Indian data principals in land and production records. How Phoeniks supplies source-attributed farmland and yield evidence against DPDP obligations.
CSDDD — Corporate Sustainability Due Diligence Directive
Large EU and non-EU companies required to identify, prevent and account for adverse environmental and human-rights impacts across their chain of activities. How Phoeniks supplies source-attributed farmland and yield evidence against CSDDD obligations.
TNFD — nature-related financial disclosures
Financial institutions and corporates disclosing nature-related dependencies, impacts, risks and opportunities under the LEAP approach. How Phoeniks supplies source-attributed farmland and yield evidence against TNFD obligations.
EU Taxonomy — environmentally sustainable activities
Financial and non-financial undertakings reporting the share of turnover, capex and opex aligned with the taxonomy's technical screening criteria. How Phoeniks supplies source-attributed farmland and yield evidence against EU Taxonomy obligations.
IFRS S2 — climate-related disclosures (ISSB)
Entities applying ISSB standards to disclose climate-related risks, opportunities, metrics and scenario resilience. How Phoeniks supplies source-attributed farmland and yield evidence against IFRS S2 / ISSB obligations.
Bank climate risk — Basel and ECB supervisory expectations
Banks integrating climate and environmental risk into credit granting, ICAAP, stress testing and Pillar 3 disclosure. How Phoeniks supplies source-attributed farmland and yield evidence against Bank climate risk obligations.
Solvency II — insurer model governance
Insurers and reinsurers whose technical provisions or internal models rely on external data and third-party model output. How Phoeniks supplies source-attributed farmland and yield evidence against Solvency II obligations.
EU AI Act — transparency and model governance
Providers and deployers of AI systems used in decisions affecting access to credit, insurance or other essential services. How Phoeniks supplies source-attributed farmland and yield evidence against EU AI Act obligations.
ISO 27001 — information security management
Institutional buyers whose vendor onboarding requires a certified information security management system alongside SOC 2 evidence. How Phoeniks supplies source-attributed farmland and yield evidence against ISO 27001 obligations.
Carbon MRV — Verra, Gold Standard and market integrity rules
Project developers and buyers needing monitoring, reporting and verification evidence for agricultural soil-carbon and land-use claims. How Phoeniks supplies source-attributed farmland and yield evidence against Carbon MRV obligations.
Privacy Act 1988 — Australian agricultural data
Handling of personal information about Australian landholders, alongside national agricultural data standards. How Phoeniks supplies source-attributed farmland and yield evidence against Privacy Act 1988 obligations.
Kenya Data Protection Act 2019
Processing of personal data relating to Kenyan producers, including transfer outside Kenya for analysis or reporting. How Phoeniks supplies source-attributed farmland and yield evidence against Kenya DPA 2019 obligations.
EUDR vs CSRD
EUDR and CSRD side by side: who is in scope, what evidence each demands, and where the two regimes overlap.
EUDR vs SFDR
Compare the EU Deforestation Regulation with the Sustainable Finance Disclosure Regulation: scope, obligated party, evidence, and how farmland data serves both.
See also
Request access
Institutional access. No self-serve trial.