Data Protection Laws of ASEAN
The Association of Southeast Asian Nations (ASEAN) comprises 10 countries in Southeast Asia. Data protection law is an expanding field in ASEAN with 6 countries at present having a national data protection law and at least 2 others developing a new law. Malaysia, Singapore, and the Philippines where the first 3 countries to enact data protection laws, in the early 2010s, and these countries laws are the most mature in the region. More recently, Thailand (2018), Indonesia (2022) and Vietnam (2023) have enacted their own data protection laws and are in the process of bringing them into force.
One key objective of this course is to provide a comprehensive practical understanding of the data protection laws within the ASEAN region, with a focus on the laws of Malaysia, Singapore, the Philippines, and Thailand. It adopts a comparative approach and highlights similarities, common themes, and key differences across these countries’ laws. This is intended to enable participants to better understand and appreciate how the laws apply in practice to their own organisations. Another important objective of this course is to addresses cross-border aspects of data protection, particularly within the ASEAN region. This includes practical aspects of data protection management and compliance in a cross-border context.
Participants will have the opportunity to develop a personal framework to be able to understand and compare data protection laws across different jurisdictions and, through case studies, practical exercises, and discussions, to relate what they learn to their own organisations and context.
Who should attend?
This course is essential for anyone who wishes to develop a good practical understanding of data protection law in a cross-border context, particularly within the ASEAN region. This may include
- Data Protection Officers (DPOs) and Compliance Professionals
- Data Protection / Privacy Counsels and Corporate Counsels
- Data Scientists and Data Analysts
- Information Technology (IT) and Cybersecurity Professionals
- Human Resource (HR) Professionals
- Executives, Managers, and Staff involved in the management, collection, use or other processing of personal data
Course Details
Course Code: |
DP405 |
Title: |
Data Protection Laws of ASEAN |
Duration: |
2 days (approximately 14 contact hours) |
Mode of Training: |
In-person |
Available Date(s): |
17 - 18 June 2025 |
Time: |
9.00am - 5.00pm (SGT) |
Venue: |
Drew & Napier LLC, 10 Collyer Quay, 10th Floor, Ocean Financial Centre, Singapore 049315 |
Course Fee: |
S$2,000.00 (excluding GST) |
Course Outline
Day 1
- Introduction to Data Protection and its International Context
- Overview of Data Protection Laws in ASEAN
- Understanding the Structure of Data Protection Law
- Data Protection in Singapore
- Data Protection in Malaysia
Day 2
- Cross-border Transfers of Personal Data within (and beyond) ASEAN
- Data Protection in the Philippines
- Data Protection in Thailand
- Managing Personal Data Across Borders
Course Facilitator
David N. Alfred
Director, Corporate &
Finance
Co-Head, Data Protection,
Privacy & Cybersecurity
Practice
Co-Head and Programme
Director, Drew Data
Protection &
Cybersecurity Academy
|