PDPA Training 101: What Attendees Can Expect
The PDPA (Personal Data Protection Act) in Singapore is actually a data protection law that involves various guidelines regulating the collection, handling, protection, and admission of personal data.
It also acknowledges the rights of an individual to safeguard their personal data from abuse as well as mishandling, together with rights to admission and rectification of their personal data.
As related stakeholders often handle and manage clients’ and employees’ personal data, it is critical that they know and recognise how the Personal Data Protection Act can influence their work as well as policies.
Therefore, it is essential to review and re-examine current guidelines and processes to support the act especially in key departments like sales and marketing, IT, logistics, workplace safety and well-being, operations, and HR.
Though it is crucial to utilise these personal data for detailed purpose/s, other responsibilities for example protection and maintenance must be adhered to. Any breach of the PDPA provision will merit both criminal and/or civil action against the corporation as well as the person concerned.
It is therefore essential that companies exhibit compliance by making sure data protection guidelines and staff training are available. All companies operating in Singapore must follow the terms of the PDPA and appoint a Data Protection Officer (DPO) or a DPO team.
In addition, they should be properly trained.People attending the PDPA training will receive a certification as proof that they have completed the PDPA training.
Primarily, the objective of this 2-day advanced program is to offer an in-depth guide on how you can establish a well-organised and easy to manage system in the organisation.
The training can also help warrant that you and your organisation is in 100 percent compliance.
Objectives of the PDPA Training
List the 9 critical requirements of PDPA
List important Do Not Call (DNC) prerequisites
Fully understand important exemptions of PDPA
Reflect on the effects of PDPA on individual departments
Recognize and/or review presented practices/processes to ensure compliance to PDPA I
Segment 1
Prologue to PDPA
Applications of the PDPA and agreement
Consequences of breaching the PDPA
9 key responsibilities of the PDPA II
Segment 2
DNC Provisions Checking the DNC Registry Exemptions under Schedule 2 of PDPA III
Segment 3
The implication of PDPA and your sector
Refined Guidelines on using NRIC Numbers
Performing Data Inventory for your sector
Overview of the Data Collection method
Functions and Duties of Stakeholders to stay in agreement with PDPA
Engaging Third Parties and Data mediators
Controlling Data breach
Data Breach Management Plan
Assessing Risk and Impact of Data breach
PDPA Risk Matrix
Who Needs to Attend
This program is intended for all officers and managers of any group of people that manage personal data, mainly the Data Protection Officer. This also includes those in the legal, sales, finance, marketing, human resources, and compliance and review teams.
In addition, the training is also designed for those who are in the upper management, for instance, the president, chief executive officer, chief financial officer, directors, chief information officer, ang managing director.
In essence, it is also important that those people in the higher management are very familiar with the PDPA and all its ins and outs. This is also necessary so they can effectively manage those who handle personal data.
It is important to keep in mind that there are criminal as well as civil sanctions for those who violate the PDPA.
What to Expect
The facilitator of the workshop will include a range of training methods, as well as dialogue on industry examples, interactive exercises, and sharing of actual PDPA cases.
