Companies and organizations collecting, using, disclosing, and/or transferring Personal Data need to prepare for the implementation to comply with the PDPA to avoid any penalties which could be imposed to the company for the non-compliance.