Key Data Protection Obligations

This session provides a practical overview of the key data protection obligations applicable to organisations under Singapore’s Personal Data Protection Act 2012 (PDPA). It will cover the fundamental principles and requirements relating to the collection, use, disclosure, retention and protection of personal data.

The session will also highlight common data protection risks and compliance challenges faced by organisations, including the management of data breaches and incident response. Practical considerations and examples will be discussed to assist DPOs, in-house counsel and CISOs in identifying and managing data protection risks within their organisations.

• Fee: S$ 280(Nett)

• 1.5 Public CPD Points

• Practice Area:  Telecommunications, Media & Technology

• Training Level: General

LEARNING OUTCOME

By the end of the session, participants will be able to:

• Identify the key data protection obligations applicable to organisations under Singapore’s Personal Data Protection Act 2012 (PDPA). 

• Understand the requirements relating to the collection, use, disclosure and protection of personal data. 

• Recognise the key obligations of organisations in relation to consent, notification, purpose limitation, accuracy, retention and access/correction requests. 

• Assess common data protection risks and identify practical measures to mitigate such risks. In this regard the seminar will deal with some scenarios where there is a data breach and how the legal risks could be mitigated in anticipation of the same. 

• Understand the requirements relating to data breach management and the notification of notifiable data breaches. 

• Apply the key data protection principles to common workplace and business scenarios. 

• Identify practical steps organisations can take to strengthen their data protection policies, procedures and governance frameworks.

  
  

COURSE OUTLINE

Part I - Data Breach Notification (20 mins)

• Key requirements and assessment of whether a data breach is notifiable

• Notification obligations and timelines

• Practical considerations in managing and responding to data breaches

Part II - International Data Transfers (20 mins)

• Key requirements for transferring personal data outside Singapore

• Ensuring a standard of protection comparable to that under the PDPA

• Practical considerations for cross-border data transfers

Part III - Security Measures (20 mins)

• Organisations’ obligations to protect personal data

• Appropriate security arrangements and risk-based measures

• Common security risks and practical compliance considerations

Part IV - Data Retention Obligations (20 mins)

• Requirements relating to the retention of personal data

• Determining appropriate retention periods

• Disposal and anonymisation of personal data when retention is no longer necessary

Part V - Q&A (10 minutes)

• Audience Q&A, and discussion

SILE ATTENDANCE POLICY

Participants who wish to obtain CPD Points are reminded that they must comply strictly with the Attendance Policy set out in the CPD Guidelines. For this activity, this includes signing in on arrival and signing out at the conclusion of the activity in the manner required by the organiser, and not being absent from the entire activity for more than 15 minutes. Participants who do not comply with the Attendance Policy will not be able to obtain CPD Points for attending the activity. Please refer to http://www.sileCPDcentre.sg for more information.

Contact Us at +65 93899120 or events@vrseasia.com.