PDPA 2010: Core Principles and Practical Application

Introduction to Personal Data Protection for people without legal or regulatory compliance background, equips participants with essential knowledge and practical skills for safeguarding personal data in their workplace. Participants will explore various types of personal data, distinguishing clearly between general and sensitive information. The session emphasizes practical application of the seven core principles of Personal Data Protection, enabling participants to implement these effectively within their daily operations. Additionally, participants will learn proactive strategies to avoid negligence, mitigate risks, and prevent offences in handling personal data, ensuring compliance and reinforcing best practices within their organizations.

Targeted Participants:

• HR Professionals (HR Executives, HR Managers, Payroll, Recruitment)
• Administrative & Operations Staff handling employee or customer data
• Customer Service & Sales Personnel managing client information
• IT & System Support Staff involved in data handling and storage
• Line Managers / Supervisors responsible for team or employee records
• Any employees who handle personal data in their daily work

Module 1: Overview of Data

• Data leaks / threat in Malaysia
• About Personal Data
• Introduction to PDPA 2010
• 13 Sectors / Class of Data Controller

Module 2: Strategic Risk Management in Data Protection

• General Principle
• Notice and Choice Principle
• Disclosure Principle
• Security Principle
• Retention Principle
• Data Integrity Principle
• Access Principle
• Common negligences

Module 3: Personal Data Protection Standard

• Security Standard
• Retention Standard
• Data Integrity Standard

Module 4: Compliance Roadmap

• New Obligation under PDPA Amendment
• Action Plan
• Final Reflection

At the end of this course, participants will be able to:

• Identify the main component of PDPA 2010
• Apply 7 principles of Personal Data Protection in practical working environment
• Demonstrate ways to avoid negligence and offence in protecting personal data

Method of Training:

• Lecture and hands on teaching
• Assessment
• Group and individual activities
• Visual learning using videos and slides animation