Applying the Personal Data Protection Act in a Business Environment

 

This course provides a comprehensive practical understanding of the Singapore’s Personal Data Protection Act 2012 (PDPA). It covers all the main Data Protection and Do Not Call (DNC) obligations under the PDPA and will enable participants to apply the PDPA in various practical situations. This course covers essential topics such as developing data protection policies, requirements for processing personal data, data breach management, handling transfers of personal data and addressing contraventions of the PDPA. Participants will have opportunities, through case studies, practical exercises, and discussions, to relate what they learn to their own organisations, with a view to improving their organisations’ data protection policies and practices.

Who should attend?

This course is essential for anyone who wishes to develop a good practical understanding of the data protection obligations of organisations and rights of individuals under the PDPA.

  • Executives, managers, and staff involved in the collection, use and management of personal data and / or other personal data activities
  • Data Protection Officers (DPOs) and compliance professionals
  • Data Protection / Privacy counsels, and corporate counsels
  • Data scientists and Data analysts
  • IT and cybersecurity professionals
  • HR professionals

Course Details

Course Code: DP401
Duration: 2 days (approximately 14 contact hours)
Mode of Training: In-person
Available Date(s): 7 - 8 May 2024
3 - 4 June 2024
Time: 9.00am - 5.00pm (SGT)
Venue: 10 Collyer Quay, 11th Floor Ocean Financial Centre, Singapore 049315
Course Fee:  S$2,000.00 (excluding GST)
Modes of Payment: We accept payment via bank transfer or cheque.

To view available dates and register for this course, please click here. You may also register for this course and view all available courses on our course schedule page (www.drewnapier.com/Academy/Course-Schedule).

Course Outline

Day 1

  • Introduction to the PDPA and key data protection concepts
  • Taking responsibility for personal data: Demonstrating Accountability
  • Collecting, using, and disclosing personal data: Purpose, Consent and Notification
  • Processing personal data: Data Minimisation, Accuracy and Retention
  • Rights of individuals and responding to complaints
  • Application in specific areas: Anonymisation, Employment and Data Analytics

Day 2

  • Cross-border transfers of personal data
  • Protecting personal data and offences relating to misuse of personal data
  • Responding to and notifying data breaches
  • Do Not Call requirements
  • Application in specific areas: Cloud and Online Activities, Digital marketing, and Cybersecurity
  • PDPC’s role and approach to enforcement of the PDPA

Course Director & Facilitator

David-N-Alfred-CV.jpg
 
David N. Alfred
 

Director, Corporate &
Finance

Co-Head, Data Protection,
Privacy & Cybersecurity
Practice

Co-Head and Programme
Director, Drew Data
Protection &
Cybersecurity Academy