Understand the critical few PDPA obligations most commonly breached by both public and private sector organisations .

While technology enhances work productivity, it has often caused PDPA breaches, such as auto-complete functions, not using email BCC field, Google shared forms/folders, Internet bots, and more.

This course introduces the must-know about PDPA and highlights common social media, events management and work practices that easily fall foul of the Personal Data Protection Act.

As this workshop has several hands-on online activities, participants must BRING ALONG OWN LAPTOP, which can be connected to public WiFi provided by the hotel. If you are using company laptop, please ensure IT dept unlocks security features that might block access to Internet or downloading of PDF files.

Objective

By the end of the workshop you will be able to:

1. Identify personal data
2. Identify whether your work impacts PDPA compliance
3. Discuss PDPA infringement case studies
4. Analyse how common practices for email, social media postings and technology usage can breach PDPA obligations
5. Recommend PDPA best practices at the workplace
6. Draft a simple consent clause

Outline

DEFINITION OF PERSONAL DATA

• Is personal handphone number printed on business card considered personal or business?
• Is your blood type personal data?
• What about thumbprint?

EXEMPTIONS

• Individuals acting in personal or domestic capacity
• Public agencies
• Employee acting in the course of employment
• emergency situations

PDPA OBLIGATIONS MOST COMMONLY BREACHED

• Consent
• Must I consent in order to join in supermarket lucky draw?
• Purpose
• Notification

CASE STUDIES

• Actual breaches of PDPA for selected industries
• Breach of PDPA triggered by auto-complete function
• Breach of PDPA by labelling photos with NRIC numbers
• Breach of PDPA by sending email not using BCC field
• Breach of PDPA triggered by document collaboration shared in Google Drive
• Personal information shared in WhatsApp group

HANDS-ON ACTIVITIES

• How to find templates for privacy notices
• How to auto generate a basic data protection notice

BEST PRACTICES

• Compiled from Case Studies and discussion
• When emailing
• When setting up WhatsApp group
• When naming files that are uploaded to websites

Who should attend

Anyone, whether employee, freelancers, business owners or IT personnel., who handles personal data, e.g. email lists, photos posted on social media.

Methodology

Workshop facilitation, experiential learning, group discussion, peer learning, hands-on activities, reflection.

Gladys Ng's Profile

Gladys NG holds multiple professional qualifications;
LL.B. (Hon) from NUS, MBA from NTU, CA (Singapore), CFA, ACTA, DACE.

Gladys conducted PDPA workshops at Institute of Adult Learning.

She was a tutor for Legal Environment of Business at NUS Business School and has taught Contract Law at SUSS and NAFA.

Gladys is a recognised Specialist Adult Educator