PDPA is a new law enacted to protect personal data, including the collection, use, processing, and disclosure of this data. This can directly affect every organization, especially within the Personnel Department and/or Human Resources Department, which tend to be departments that have the most access to personal information within an organization. Both of these kinds of departments collect information about employees and job applicants. In addition, they tend to use or forward personal data to other departments and/or other companies. It is necessary to have appropriate protection of personal data within these departments to prevent the infringement of personal data.