What audit steps are involved when conducting a corporate PDPA compliance gap analysis for medium-to-large companies — Deadlines are the substance here: Revenue Code returns go to the Revenue Department on each form’s own cycle, financial statements to the Department of Business Development, and contributions to the Social Security Office monthly. /tax identification number|TIN/i Anyone present in Thailand for 180 days or more in a tax year is a Thai tax resident under the Revenue Code. Thailand has double tax agreements with many countries; treaty relief requires a certificate of tax residence from the treaty partner. The 90-day report for foreign residents can be filed in person, by post, or through the Immigration Bureau online system. A judgment or court order used abroad must be obtained as a certified extract from the court that issued it. A foreign business licence is assessed against the schedules to the Foreign Business Act B.E. 2542. Documents altered with pen or correction fluid are generally rejected; a clean reissued copy is required. Where a statutory deadline or a court date is involved, we set out the realistic time frame and the associated risks in advance.
“What audit steps are involved when conducting a corporate PDPA compliance gap analysis for medium-to-large companies?” falls within an end-to-end service that combines document preparation, translation, signature certification, consular legalisation and coordination with the destination mission into a single file. The people who search for it are usually preparing a filing against a fixed deadline, recovering from a rejected submission and trying to identify the missed step, or coordinating documents for several people at once.
In practice, each step sits with a different body: the issuing office, the Notarial Services Attorney, the Department of Consular Affairs, and the destination country’s diplomatic mission. Knowing which body owns which step makes it possible to judge how many stages a bundle needs, and which of them cannot be corrected without starting again.
This is a baseline set. Individual receiving authorities may add requirements, so confirm with the destination body first.
Record how many stages each document needs, who certifies it, and what must finish first, so no step has to be redone.
Check personal names, company names, addresses and dates across the whole bundle before any certification begins.
Original → translation → signature certification / legalisation → destination mission. Doing these out of order forces a restart.
Verify the number of sets, the seals, the binding, and that issue dates are still within the destination’s validity window.
| Route | When it applies |
|---|---|
| Notarial Services Attorney certification | For privately drafted instruments — powers of attorney, affidavits, consent letters — signed in the attorney’s presence. |
| Legalisation at the Department of Consular Affairs | Where a foreign authority needs confirmation of the Thai issuing office’s signature and seal, or of the translation. |
| Attestation at the destination mission | Where the destination country requires its embassy or consulate in Thailand to attest the file after consular legalisation. |
| Thailand’s Apostille status | Thailand acceded to the Apostille Convention on 30 June 2026 and it enters into force for Thailand on 28 February 2027. No Apostille is issued in Thailand before that date. |
If you are working through “What audit steps are involved when conducting a corporate PDPA compliance gap analysis for medium-to-large companies?”, start by getting the receiving authority’s requirement in writing, then plan the certification chain backwards from your real filing date.