INTRODUCTION FOR DATA PRIVACY & PROTECTION AWARENESS (PDPA/GDPR)
This course provides participants with a foundational understanding of data privacy principles and personal data protection obligations under PDPA and GDPR. It builds awareness of compliance requirements, personal data handling best practices, and organizational responsibilities in safeguarding personal information.
LEARNING OBJECTIVES
By the end of this training, participants will be able to:
- Understand the key concepts and principles of PDPA and GDPR.
- Identify personal data and recognize data protection obligations.
- Apply data handling best practices in day-to-day operations.
- Recognize data breaches and follow appropriate reporting procedures.
- Support organizational compliance initiatives.
TARGET AUDIENCE
- All employees handling personal data.
- HR, marketing, operations, IT, and customer service staff.
- Compliance and administrative personnel.
COURSE OUTLINE AND ITINERARY
Time | Module | Key Topics |
09:00 – 09:30 | Introduction to Data Privacy | Importance of data protection, real-world breach examples, organizational accountability |
09:30 – 10:45 | Understanding PDPA & GDPR Frameworks | Key principles, lawful processing, data subject rights, consent management |
10:45 – 11:00 | Morning Break | |
11:00 – 12:45 | Data Lifecycle Management | Data collection, storage, sharing, retention, and disposal; handling sensitive data |
12:45 – 14:30 | Lunch Break | |
14:30 – 15:30 | Data Breaches and Incident Response | Common breach scenarios, internal reporting process, notification requirements |
15:30 – 15:45 | Afternoon Break | — |
15:45 – 16:30 | Practical Application Workshop | Case studies on consent, access requests, and data sharing; role-based exercises |
16:30 – 17:00 | Assessment and Closing Discussion | Knowledge quiz, Q&A, and action points for organizational compliance |
