Understanding PDPA in Real Business Context (with 2024 Updates)

Key PDPA concepts and how personal data flows within an organisation, PDPA 2010 as the primary law and the impact of the 2024 amendment, roles of data controller, data processor and updated responsibilities, and where compliance risks typically occur.

Data Protection Principles and Individual Rights

Applying PDPA principles to real scenarios, managing data subject access and correction requests, and introduction to data portability rights under the updated law.

Role and Responsibilities of a DPO

Mandatory DPO appointment requirements under the updated law, defining the role of a DPO within an organisation, and how to advise management, maintain records, and support compliance efforts.

Building Your Internal Data Protection Framework

Creating practical policies, assigning responsibilities, structuring documentation, and aligning the internal framework with updated PDPA requirements.

Data Breach Simulation and Response Planning

Definition of a personal data breach, breach notification obligations under the 2024 amendment, walking through real breach scenarios, and developing a basic incident response plan.

DPIA and Risk Management in Practice

Understanding when a DPIA is required — including scenarios covered under the 2026 JPDP DPIA Guidelines — and how to assess and mitigate data protection risks effectively.