Does your company collect personal data from employees or customers?
Is your company PDPA compliant?
Have you appointed a Data Protection Officer?
Have you put security measures to protect the data in your possession?
Do you have policies and processes to avoid data breaches?