Understanding the Personal Data Protection Act (PDPA)

Outline

Module 1: Introduction to PDPA

• Overview of the PDPA and its purpose
• Importance of personal data protection in the digital age
• Definitions: Personal data, Data subject, Data controller, Data processor
• Scope and applicability of PDPA to businesses
• Key principles of personal data protection

Module 2: Key Obligations under PDPA

• Consent and the lawful basis for data processing
• Data collection, use, and disclosure requirements
• Data security obligations and protection measures
• Data retention and disposal
• Rights of individuals (access, correction, and withdrawal of consent)

Module 3: Developing a Data Protection Management Program (DPMP)

• Introduction to the Data Protection Management Program (DPMP)
• Implementing policies and procedures to manage personal data for your organisation
• Appointment of a Data Protection Officer (DPO)
• Staff training and awareness programs
• Managing third-party service providers and data sharing

Module 4: Data Breach Management and Response

• Definition of a data breach under PDPA
• How to prepare a data breach response plan
• Key steps to take in the event of a data breach
• Mandatory breach notification requirements
• Case studies on data breaches and lessons learned