ROPA is the key to discovering data flows both internally and externally for your organization. For clients who have not started their ROPA phase, we will guide them through step-by-step to ensure that this phase is executed to achieve desired outputs. We will then advise you on how to create a full data map.

To raise organizational awareness regarding importance of PDPA, we will conduct a training session for all relevant staff members. This “Introduction to PDPA” course will include the following: Introduction to the PDPA + key terminology

• Principles and key roles of the PDPA
• The rights of Data subjects
• Lawful basis for processing of personal data
• Subject access requests and how to deal with them

Training can be completed either onsite or online as required.

According to the PDPA, how long we keep certain data types and if we have a destruction policy that complies with the PDPA are essential. We will work with the client in developing a data retention schedule for all data-types in various departments across the business to ensure operational efficiency and legal compliance.

In terms of consent collection, our consultants will provide advice for our clients to ensure that consent collection and management is compliant with PDPA and ensure operational effectiveness.

Our consultants will setup your DSAR management protocols and procedures. Throughout the course of the contract, we will be available to support our clients the full scope of DSAR.

3rd Party and Vendor management is also an essential area for PDPA compliance. We will support our clients in developing procedures in vendor due diligence, evaluation, and pre-qualification to ensure that vendors have Data Protection policies in place, or issue DPA (Data Protection Addendums) to rectify scope of vendor responsibilities.

Our consultants and legal team will be ready to advise our clients on legal matters related to the PDPA and/or any international transfer cases. We will assign a designation contact person for our clients to be able to contact via phone, email, or MS Teams.

Using the outputs from previous steps, our consultants will populate the PDPA Management platform with organization-specific data to support the client in managing and keeping track of their PDPA compliance journey, including key dashboards, checklist/reminders, dynamic data maps, and a fully customized document library.