DPML1 - MONITOR AND ASSESS ORGANISATION’S PERSONAL DATA PROTECTION POLICIES AND PRACTICES by NTUC LearningHub

You will be able to identify the following:

• Key obligations under the Data Protection Provisions of the PDPA
• Data lifecycle within the organisation and its management
• Data protection tools and resources that organisations can apply in order to comply with PDPA

You will be able to perform the following:

• Identify gaps using PDPCs PDPA Assessment Tool for Organisations
• Develop/generate monitoring and tracking mechanisms like the Data Inventory Map, data flow
• diagram, consent register, personal data asset inventory, to aid the organisation in managing the data cycle
• Evaluate the organisations personal data protection policies and practices/SOPs to assess their effectiveness in managing risks
• Participate in the review of policies and procedures to identify data protection gaps and appropriate remedies
• Recommend improvement, updates or modifications to current policies and practices to address potential gaps or vulnerabilities
• Use templates to generate notices to inform an organisations stakeholders on how it manages personal data
• Identify tools and resources and apply them to suit organisations data protection management needs

Pre-requisites

Pre-requisites

1. Learner has attended and is competent for module titled Fundamentals of Personal Data

Protection Act or its equivalent

1. Learners are assumed to be able to:

• Understand relevant organisational strategies, objectives, culture, policies, processes and products / services
• Have information gathering skills to gather and collate necessary data
• Have analytical skills to assess policies and procedures
• Have business writing skills to prepare management report
• Have interpersonal and communication skills to interact with relevant stakeholders
• Have facilitation skills to ask the right questions to elicit necessary information; and
• Be aware of compliance requirements of organisation

Hardware & Software

This course will be conducted as a Virtual Live Class (VLC) via Zoom platform. Participants must own a zoom account and have a laptop or a desktop with “Zoom Client for Meetings” installed. This can be downloaded from https://zoom.us/download

Course Outline

Personal Data Protection Act (PDPA)

•   Objectives of the Act
•   Key Terms
•   Application

Data Protection Provisions and Do Not Call Provisions

• PDPA 9 Key Obligation
• Consent
• Purpose Limitation
• Notification
• Access and Correction
• Accuracy
• Protection
• Retention Limitation
• Transfer Limitation
• Openness
• Do Not Call Provisions

PDPA Assessment Tool for Organisation

• How to use the PATO
• Identifying gaps using PATO
• Other tools available and their uses

Tracking mechanisms

• Data Inventory Maps
• Establishing practice
• Maintenance and review
• Data Flow Diagrams
• Consent Registry
• Content
• Maintenance
• Exemptions from consent obligation

Review of policies and procedures

• Identification of gaps
• Resolving gaps with appropriate measures
• Types of measures

Generation of Notices

• Types of notices required
• Drafting of templates for notices
• Resources available from PDPC