Programme Objective

In Singapore, under the Personal Data Protection Act (PDPA) and relevant regulations, all organisations are required to appoint a Data Protection Officer (DPO) who: -

• Will be responsible for helping his or her firm to comply with the PDPA and the relevant laws that are applicable to the specific industry in relation to the handling of personal data in the company’s possession; &
• Who has to be equipped with necessary knowledge and skills to implement the relevant measures.

However, the criticality of Data Privacy and Data Protection is often misunderstood. Consider the following questions and see if your Company: -

• Knows what it should or should not do with personal data?
• Knows what is included and what is excluded from this Act?
• Has a structured investigation process?
• Has a process for dealing with complaints regarding data protection?

If your answer is No to any one of these questions, this workshop will be necessary for your company to avoid potential entanglements arising from data privacy breaches. This is a 1-day course, which will:

 

• Focus on the main data protection principles;
• Highlight the proposed amendments to the PDPA; &
• Focus on the responses and management of Data Breaches

Programme Outline

 

• Data Protection Provisions and Do Not Call Provisions.
• The scope of the 9 Obligations under the PDPA data protection provisions and exceptions.
• The risk implications of breaching the PDPA.
• Practical applications of the PDPA e.g. personal identification documentation such as NRIC, photography, recordings, etc.
• Managing Data Breaches
  • Understanding: -
    • What constitutes is a Data Breach
    • How Data Breach Could Occur
  • Responding to a Data Breach
• Data Breach Investigations Process
• Demonstrate accountability to PDPA e.g. awareness, training programmes, etc.
• Case Studies involving breaches and alleged breaches of the PDPA.

Training Methodology

The Course will be delivered through classroom facilitation and emphasizing on practical application.  To enhance the learning experience, there will be quizzes and case laws will be used for analysis and discussion.

Closing Date for Registration

1 week before programme or until full enrolment.

Intended For

Level: - The Programme lays the practical foundation in Singapore’s personal data protection regime. Requirements: - The participants are assumed to be able to have requisite:

• Knowledge of the compliance requirements of his/her organisation.
• Facilitation skills to ask the right questions to elicit necessary information.
• Interpersonal and communication skills to interact with relevant internal and external stakeholders.

Target audience include: -

1. Compliance Managers
2. Data Protection Officers (DPOs)
3. Staff who need to handle personal data based on their job requirements, for example, sales and business development executives/managers who need to be involved in data requisition, application and protection matters.
4. Owners of the small-medium sized enterprises.

Programme Facilitator(s)