PDPA in Schools: A Guide to Managing Data Legally and Responsibly PDPA compliance in schools means following Thailand's Personal Data Protection Act, which requires every educational institution to carefully collect, use, and disclose data belonging to students, parents, and staff. Schools must obtain proper consent, implement data security measures, and establish clear policies—otherwise they risk civil, criminal, and administrative liability. Why Should Schools Pay Extra At