Data Protection Laws of ASEAN: Malaysia, Singapore, Thailand, and the Philippines

The Association of Southeast Asian Nations (ASEAN) comprises 10 countries in Southeast Asia. Data protection law is an expanding field in ASEAN with 6 countries at present having a national data protection law and at least 2 others developing a new law. Malaysia, Singapore, and the Philippines where the first 3 countries to enact data protection laws, in the early 2010s, and these countries laws are the most mature in the region. More recently, Thailand (2018), Indonesia (2022) and Vietnam (2023) have enacted their own data protection laws and are in the process of bringing them into force.

One key objective of this course is to provide a comprehensive practical understanding of the data protection laws within the ASEAN region, with a focus on the laws of Malaysia, Singapore, the Philippines, and Thailand. It adopts a comparative approach and highlights similarities, common themes, and key differences across these countries’ laws. This is intended to enable participants to better understand and appreciate how the laws apply in practice to their own organisations. Another important objective of this course is to addresses cross-border aspects of data protection, particularly within the ASEAN region. This includes practical aspects of data protection management and compliance in a cross-border context.

Participants will have the opportunity to develop a personal framework to be able to understand and compare data protection laws across different jurisdictions and, through case studies, practical exercises, and discussions, to relate what they learn to their own organisations and context.

Who should attend?

  • Business executives and managers involved in the management, collection, use or other processing of individuals’ personal data
  • Data Protection Officers (DPOs) and compliance professionals
  • Data protection counsels, privacy counsels and corporate counsels
  • Data scientists and data analysts
  • IT and cybersecurity professionals
  • R professionals

Course Details

Course Code: GL401
Duration: 2 days (approximately 14 contact hours)
Mode of Training: In-person
Available Date(s): 23 - 24 May 2024
19 - 20 June 2024
Time: 9.00am - 5.00pm (SGT)
Venue: 10 Collyer Quay, 11th Floor Ocean Financial Centre, Singapore 049315
 
Course Fee: S$2,000.00 (excluding GST)
Modes of Payment: We accept payment via bank transfer or cheque.

You may register for this course online by clicking here or by emailing us at academy@drewnapier.com.
 

Course Outline

Day 1

  • Introduction to Data Protection and its International Context
  • Overview of Data Protection Laws in ASEAN
  • Understanding the Structure of Data Protection Law
  • Data Protection in Singapore
  • Data Protection in Malaysia

Day 2

  • Cross-border Transfers of Personal Data within (and beyond) ASEAN
  • Data Protection in the Philippines
  • Data Protection in Thailand
  • Managing Personal Data Across Borders

Course Director & Facilitator

David-N-Alfred-CV.jpg
 
David N. Alfred
 

Director, Corporate &
Finance

Co-Head, Data Protection,
Privacy & Cybersecurity
Practice

Co-Head and Programme
Director, Drew Data
Protection &
Cybersecurity Academy