Navigating Malaysia’s Personal Data Protection Act 2010 and the 2024 Amendments: Implications for Businesses and Compliance
Attend our Half-Day Seminar on the PDPA Amendments 2024 for an in-depth analysis of the recent updates to Malaysia’s Personal Data Protection Act and their practical implications for businesses. This seminar will provide a comprehensive overview of the new regulatory requirements, including mandatory breach notification obligations, updated guidelines for cross-border data transfers, and heightened enforcement measures. Additionally, we will explore key developments across the region and internationally, ensuring your organization is equipped to navigate the evolving data protection landscape. Gain valuable insights and practical tools to enhance your compliance strategy and safeguard your organization’s data assets.
Course Outline
Introduction and Overview
- What is the PDPA and why was it introduced?
- How has data protection evolved in Malaysia since 2010?
- Malaysia’s digitisation journey and the significance of the PDPA Amendment Act 2024.
Overview of Malaysia’s PDPA (45 mins)
Objective: Providing a refresher and overview understanding of the core principles of the PDPA.
- PDPA Fundamentals:
- Legal purpose and scope of the PDPA.
- Definitions of personal data and sensitive personal data.
- Key compliance obligations for data “users”.
- Seven Data Protection Principles:
- General Principle
- Notice and Choice Principle
- Disclosure Principle
- Security Principle
- Retention Principle
- Data Integrity Principle
- Access Principle
- Enforcement and Penalties:
- What happens in the case of non-compliance?
- Process of investigation and enforcement.
- Regulatory body enforcement powers and fines.
Key Changes in the PDPA Amendment Act 2024 (45 mins)
Objective: To understand the specific amendments introduced by the PDPA Amendment Act 2024 and their impact on businesses.
- Key Amendments Overview:
- Changes to terminology.
- Introduction of biometric data.
- Data portability requirements.
- Appointment of data protection officer.
- New provisions for cross-border data transfers.
- Mandatory breach notification requirements.
- Strengthened penalties for non-compliance.
- Operational Implications:
- How does this affect your business operations?
- New requirements for data controllers and processors.
Regional and Global Data Protection Landscape (45 mins)
Objective: Provide a global perspective, highlighting developments in other jurisdictions and how they may impact local businesses.
- Regional Developments:
- Data protection laws in neighbouring ASEAN countries (e.g., Singapore’s PDPA, Thailand’s PDPA).
- How Malaysia’s PDPA compares with regional standards.
- The need for businesses to adapt to a more harmonized regional framework.
- Global Trends:
- GDPR as a global gold standard.
- Key trends from the EU, US, and APAC in data privacy.
- What Malaysian companies need to be aware of when handling global data.
- Cross-Border Data Transfers:
- Latest changes to regulations regarding international data flows.
- Practical strategies for ensuring compliance when handling data across borders.
Implementation Strategies and Compliance Tips (30 mins)
Objective: Practical guidance on how to implement the PDPA and ensure compliance.
- Steps to Achieve Compliance:
- Assessing your organization’s data processing practices.
- Developing privacy and data management frameworks.
- Regular audits and employee training.
- Practical Compliance Checklist:
- Key action items for immediate implementation.
Q&A Session (30 mins)
Closing Remarks and Next Steps (15 mins)
- Summary of Key Takeaways.
Programme Details
Date: 9 October 2024, Wednesday
Time: 9.00am-1.00pm (breakfast starts at 8.30am)
Admission Price: RM45.00* (material, certification & meal)
Speaker: Mr. Darmain Segaran
*This a Non-HRD Corp Claimable programme.
Venue
Malaysia HR Forum Academy
Level 12, Menara PKNS, Jalan Yong Shook Lin,
46050, Petaling Jaya, Selangor
Share This Programme
Book Your Seat Now!
About The Trainer
Darmain, a seasoned legal professional with over 15 years of experience, leads the technology law, human capital, and commercial advisory arm at Segaran Law Chambers in Malaysia. Certified in Information Privacy Management (CIPM), he specializes in data protection, particularly in the context of emerging technologies like AI. His expertise extends to advising a broad spectrum of tech-centric organizations and contributing to the ACCESS Blockchain Association of Malaysia. Darmain is actively engaged in AI ethics research, with projects focused on developing a national AI ethics framework and creating a governance framework for personal data protection in AI. A sought-after speaker and trainer, Darmain regularly shares his insights on AI ethics and data privacy at technology conferences and workshops. His contributions have been instrumental in shaping Malaysia’s approach to AI ethics and data protection.