// company_profile.json
Grounded in Thai Privacy Law
Bodhi Reach was founded to bring practical, clearly communicated data privacy guidance to organisations navigating the demands of Thailand's PDPA.
Back to Home// our_story
Why Bodhi Reach Exists
Thailand's Personal Data Protection Act introduced a significant new compliance obligation for businesses across the country. When enforcement began, many organisations found themselves facing a complex legal framework with limited practical guidance available in English — or in a form that connected clearly to their day-to-day operations.
Bodhi Reach was established to close that gap. Our founding team brought together legal advisory experience in Thai data protection law with practical understanding of how organisations actually collect, store, and use personal information. The result is a consultancy that explains regulatory requirements in operational terms and delivers documentation that actually gets used.
We work with a wide range of clients — from regional subsidiaries of international companies to Thai-founded businesses expanding their digital services — and we adapt our approach to the specific context and scale of each engagement.
2017
founded
120+
clients served
3
core service lines
EN / TH
bilingual delivery
// team_members[]
The Advisory Team
Our advisors combine legal expertise in Thai data protection law with practical experience across regulated industries.
Parinya Lertchai
Principal Advisor — Data Law
Parinya has advised on Thai data protection matters since the pre-enforcement drafting phase, working with the PDPA Committee's guidance documents from early circulation.
Nattaya Srisombat
Documentation Lead
Nattaya specialises in the preparation of bilingual PDPA documentation packages, including privacy notices, DPAs, and ROPA frameworks tailored to sector-specific processing activities.
Kasem Phongpan
Incident Response & DPO Advisory
Kasem leads data breach response engagements and provides ongoing DPO advisory services, including staff awareness programmes and regulatory inquiry support.
// quality_protocols.cfg
Our Quality Standards
Each engagement is governed by clear standards for accuracy, confidentiality, and professional conduct.
PDPA-Specific Focus
All advisory is grounded specifically in Thailand's PDPA and the interpretive guidance issued by the Personal Data Protection Committee — not generic privacy frameworks applied without adaptation.
Client Confidentiality
All client information shared during engagements is treated with strict confidentiality. Engagement agreements include explicit data handling and non-disclosure provisions.
Document Accuracy Review
Every deliverable undergoes a secondary review before issue, verifying legal accuracy, alignment with PDPA requirements, and practical usability for the client's team.
Bilingual Standards
Thai and English language versions of documentation are reviewed for consistency, ensuring that both versions convey the same legal intent and operational instruction.
Regulatory Currency
Our advisory reflects current PDPA enforcement practice. We update client deliverables and ongoing advisory where material regulatory changes occur.
Professional Accountability
Our advisors hold personal professional responsibility for the guidance they provide. Engagements are not delegated to junior staff without appropriate supervision and sign-off.
// values_statement
How We Approach Data Privacy Advisory
Data protection compliance is a practical matter. Organisations need to understand what the law requires, assess where their current practices fall short, and take measured steps to close those gaps. Our advisory is designed to support that process without creating unnecessary complexity or documentation overhead.
The Thai PDPA places obligations on both data controllers and data processors. Many organisations hold both roles simultaneously, depending on the relationship and processing activity in question. Our assessments map these responsibilities clearly, ensuring that internal teams have a shared understanding of where their obligations lie.
Privacy documentation that is drafted without reference to an organisation's actual processing activities tends to be inaccurate and unusable. Bodhi Reach approaches each documentation engagement by first understanding what personal data the client actually handles — and for what purposes — before drafting a single clause.
For organisations that need ongoing support, our DPO Advisory arrangement provides a structured, recurring relationship rather than ad hoc consulting. This produces more consistent compliance outcomes and a clearer record of the organisation's data protection posture over time.
Ready to Start a Conversation?
We are happy to discuss your organisation's situation and outline which of our services might be a practical starting point.
Get in Touch