Objectives of the Data Protection Regime

The course will providestudentsa good overview and understanding of the PDPA and how it may be applied to the organisations for compliance. Areas covered in the training include key legislative and regulatory requirements of PDPA and how students can help ensure compliance and alignment with PDPA, as well as prepares management report for follow-up. The course will be conducted using the PDPA BM WSQ Standard Curriculum and Standard Assessment Plan developed by PDPC. Students will beawarded witha BM WSQ Statement of Attainment (SOA) issued by WDA upon successful course completion and assessment.

---

COURSE OUTLINE

Introduction to Personal Data Protection Act (PDPA)

• Objectives of the Data Protection Regime
• Key Terms – Personal Data, Business Contact Information (BCI), Individual & Organisations, Data Intermediary and Other Key Terms
• Who Will Not be Impacted?

Data Protection Provisions and Do Not Call Provisions

• PDPA 9 Key Obligations/ Consent Obligation/ Purpose Limitation Obligation/
• Notification Obligation/ Access & Correction Obligation/ Accuracy Obligation
• Protection Obligation/ Retention Limitation Obligation
• Transfer Limitation Obligation/ Openness Obligation
• Existing Data and Other Existing Laws
• Selected Topics – Employment, NRICData Protection Provisions and Do Not Call Provisions
• Selected Topics – CCTV,  Anonymisation, Research & Analytics, Online Activities
• Do Not Call Provisions:
• DNC Registry – Specified Message and Examples
• Exemption Order
• DNC Operational Rules
• Spam Control Act
• Assessment: Understanding Data Protection Provisions and Do Not Call Provisions under the PDPA

Roles of Data Protection Officer (DPO)

• Appointment of DPO/ Possible Roles of a DPO/ Governance Structures
• Assessment: Develop a Governance Structure for Your Organisation

Recap Lesson

• Personal Data Protection Act/ Key Terms and Obligations of PDPA
• Do Not Call Provisions

Create an Organisation’s Data Inventory Map (DIM) and Identify Possible Areas of Non-Compliance

• What is a DIM and How to Create One for the Organisation
• Example of a DIM
• Assessment: Develop a DIM for Your Organisation. Explain Your DIM.
• Assessment: Use the Checklist Provided, List 4 Possible Areas of Non-Compliance in Your Organisation

Develop a Process for Handling Complaints Relating to Data Protection

• Typical Complaint Handling Process
• What to Consider When Developing Process for Handling Complaints Relating to Data Protection
• Example of Complaint Handling Process Relating to Data Protection
• Assessment: Develop a Process for Handling Complaints Arising From a Breach of One of the 9 Key Obligations

Training and Communications to Staff

• Objectives and Outcomes of Staff Training and Communications
• What to Consider When Developing a Training and Communications Plan
• Example of a Training and Communications Plan
• Assessment: Create a Training and Communications Plan for Your Organisation