Classroom/ Online: Yes/ No
Scheduling Date(s):
Note: Please click specific date for detailed venue and course fee etc.
Introduction to PDPA for non-PDPA personnel
Understand the critical few PDPA obligations most commonly breached by both public and private sector organisations .
While technology enhances work productivity, it has often caused PDPA breaches, such as auto-complete functions, not using email BCC field, Google shared forms/folders, Internet bots, and more.
This course introduces the must-know about PDPA and highlights common social media, events management and work practices that easily fall foul of the Personal Data Protection Act.
As this workshop has several hands-on online activities, participants must BRING ALONG OWN LAPTOP, which can be connected to public WiFi provided by the hotel. If you are using company laptop, please ensure IT dept unlocks security features that might block access to Internet or downloading of PDF files.
While technology enhances work productivity, it has often caused PDPA breaches, such as auto-complete functions, not using email BCC field, Google shared forms/folders, Internet bots, and more.
This course introduces the must-know about PDPA and highlights common social media, events management and work practices that easily fall foul of the Personal Data Protection Act.
As this workshop has several hands-on online activities, participants must BRING ALONG OWN LAPTOP, which can be connected to public WiFi provided by the hotel. If you are using company laptop, please ensure IT dept unlocks security features that might block access to Internet or downloading of PDF files.
Objective
By the end of the workshop you will be able to:
- Identify personal data
- Identify whether your work impacts PDPA compliance
- Discuss PDPA infringement case studies
- Analyse how common practices for email, social media postings and technology usage can breach PDPA obligations
- Recommend PDPA best practices at the workplace
- Draft a simple consent clause
Outline
DEFINITION OF PERSONAL DATA
EXEMPTIONS
PDPA OBLIGATIONS MOST COMMONLY BREACHED
CASE STUDIES
HANDS-ON ACTIVITIES
BEST PRACTICES
- Is personal handphone number printed on business card considered personal or business?
- Is your blood type personal data?
- What about thumbprint?
EXEMPTIONS
- Individuals acting in personal or domestic capacity
- Public agencies
- Employee acting in the course of employment
- emergency situations
PDPA OBLIGATIONS MOST COMMONLY BREACHED
- Consent
- Must I consent in order to join in supermarket lucky draw?
- Purpose
- Notification
CASE STUDIES
- Actual breaches of PDPA for selected industries
- Breach of PDPA triggered by auto-complete function
- Breach of PDPA by labelling photos with NRIC numbers
- Breach of PDPA by sending email not using BCC field
- Breach of PDPA triggered by document collaboration shared in Google Drive
- Personal information shared in WhatsApp group
HANDS-ON ACTIVITIES
- How to find templates for privacy notices
- How to auto generate a basic data protection notice
BEST PRACTICES
- Compiled from Case Studies and discussion
- When emailing
- When setting up WhatsApp group
- When naming files that are uploaded to websites
Who should attend
Anyone, whether employee, freelancers, business owners or IT personnel., who handles personal data, e.g. email lists, photos posted on social media.
Methodology
Workshop facilitation, experiential learning, group discussion, peer learning, hands-on activities, reflection.
Profile of Gladys Ng
Gladys NG holds multiple professional qualifications;
LL.B. (Hon) from NUS, MBA from NTU, CA (Singapore), CFA, ACTA, DACE.
Gladys conducted PDPA workshops at Institute of Adult Learning.
She was a tutor for Legal Environment of Business at NUS Business School and has taught Contract Law at SUSS and NAFA.
Gladys is a recognised Specialist Adult Educator
