PDPA & DPO Effectiveness Awareness Training

PDPA & DPO Effectiveness Awareness Training

Introduction

This course is designed to enhance awareness and understanding of Malaysia’s Personal Data Protection Act 2010 (PDPA) and the roles and responsibilities of Data Protection Officers (DPOs). It focuses on the legal, organizational, and practical aspects of data protection compliance, with case-based learning and activities to reinforce effective implementation.

Key Malaysian Case Laws to Discuss

Nurul Atikah v Shopee (2022) Data access denial.
Malindo Air Data Leak (2019) Third-party vendor responsibility.
DBKL Ratepayer Breach (2021) Public sector data exposure.
iPay88 Data Breach (2022) Incident handling and stakeholder communication.
TNG Digital Sdn Bhd (2023) Consent and unfair processing.

Target Audience

Data Protection Officers (DPOs)
Compliance & Risk Managers
Legal Advisors & In-House Counsel
HR Managers
IT Managers
Anyone involved in handling personal data

HR and L&D: These programmes can be delivered to a group of staff as in-house, in both a concise 1-day format and an in-depth 2-day delivery option. Should you be interested in an official proposal, simply click the 'Get Proposal' tab and share more details (duration, no of pax, location) in the comment box so we can prepare a customised proposal and quotation for your consideration.

Outcome

By the end of this program, participants will be able to:

- Explain the 7 Personal Data Protection Principles.
- Describe the scope and territorial application of the PDPA.
- Understand the key principles and obligations under the Malaysian PDPA.
- Recognize the legal, ethical, and operational responsibilities of a DPO.
- Assess the DPO’s role in governance, policy development, and breach response.
- Conduct a basic data audit and risk assessment.
- Identify compliance gaps and recommend strategies for improvement.
- Apply practical tools and frameworks for data protection management.
- Analyze local case laws to contextualize enforcement and consequences.
- Review and critique PDPA-related enforcement cases in Malaysia.

Select to design your own content and request for a customized quotation

No	Topic	Topic Description
1	Module 1: Introduction to PDPA 2010 (Malaysia)	Background and Rationale of PDPA Key Definitions: Personal Data, Data User, Data Subject, Sensitive Personal Data Scope and Applicability (Commercial Transaction Requirement) Territorial and Cross-Border Implications
2	Module 2: The 7 PDPA Principles	General Principle Notice and Choice Principle Disclosure Principle Security Principle Retention Principle Data Integrity Principle Access Principle Activity: Group discussion – 'Which PDPA principle is most challenging to comply within your organization and why?'
3	Module 3: The Role of a Data Protection Officer (DPO)	Appointment and Qualifications Core Functions of a DPO Developing Policies and SOPs DPO Checklist for Compliance Activity: Role-play simulation – 'You're the new DPO – First 100 Days Plan'
4	Module 4: Rights of Data Subjects & Consent Management	Understanding Consent (Explicit vs Implicit) Managing Access and Correction Requests Data Subject Rights vs Organizational Rights Dealing with Withdrawal of Consent Case Law Discussion: Nurul Atikah binti Mohd Raduan v Shopee Mobile Malaysia Sdn Bhd (2022)
5	Module 5: Data Breach Notification & Enforcement	What Constitutes a Personal Data Breach Incident Response Plan Internal Reporting Structures Enforcement Powers of the PDP Commissioner Case Law Review: DBKL Case, iPay88 Payment Gateway Breach (2022) Activity: Scenario exercise – 'What would your DPO do in a ransomware breach?'
6	Module 6: Best Practices & Tools for Compliance	PDPA Compliance Roadmap Data Inventory and Data Flow Mapping Conducting a Data Protection Impact Assessment (DPIA) Templates: Consent Forms, Privacy Notice, Data Processing Agreement Activity: Workshop – Review a sample privacy notice. Spot the PDPA compliance gaps.
7	Module 7: Cross-border Transfer of Data & Global Comparison	Conditions for Cross-Border Transfer Adequate Protection Requirement Brief Comparison with GDPR & ASEAN Framework on Personal Data Protection

Expert

Navin Manghan Dewandas

Navin is an accomplished legal and business consultant, senior corporate trainer, and digital transformation advocate with more than 23 years of dynamic experiences across legal & compliance, corporate business and law, and education and training sectors. Navin is a key driver in the creation and execution of education and talent development platforms aligned with government grants, digital economy agendas, and corporate learning frameworks. He is known for his strategic insight, innovative thinking, and ability to build strong partnerships with government agencies, GLCs, MNCs, and international stakeholders. Navin’s role as Senior Manager of Business Development at BAC Education Group (2018 to 2022), where he leads key initiatives in Digital Transformation, Industry 4.0, and Digital Business by offering accessible education and skills-based training platforms to individuals, corporate clients, and government stakeholders. He is instrumental in building and nurturing partnerships with GLCs, MNCs, and ministries, leveraging available government grants and funding to support Malaysia’s human capital development and future-ready workforce initiatives. Navin has also served as the Regulatory Legal & Compliance Manager at MULA Advisory Sdn Bhd and Business Director from July 2022 to December 2023, where he provided leadership in compliance, legal, and business development within the financial services and capital market sectors. His key responsibilities included ensuring regulatory compliance, overseeing legal documentation and M&A risk management, conducting risk assessments, driving ethics and compliance culture, managing stakeholder engagement, and expanding business through strategic planning and marketing across local and international markets. He was the Vice President for M.I.T Academy Sdn Bhd, Navin managed the company’s legal affairs, marketing, recruitment, and business growth strategies, successfully driving nationwide TVET training programs, including across Sabah and Sarawak, and initiating the setup of the company’s International School. At the same time he served as the Chief Business Development Officer (CBDO) of STEMERA Sdn Bhd, an EdTech startup that he co-founded by M.I.T Academy, focused on bridging the skills gap through a digital learning and employment platform. His innovative work has been featured in global conferences, including RISE Conference 2018 (Hong Kong) and Blockchain Consensus 2018 (Singapore). Training Specialisations: Legal Practices: Business Law, Contract Law, Compliance, Intellectual Property, Privacy Policies, PDPA, ABAC, FIDIC Contract, Risk & Clauses, ESG : Anti Bribery Management System (ESG:ABMS), ESG: Personal Data Protection Act (ESG:PDPA) Digital Transformation: Google Workspace, Digital Sales Adoption, Collaborative Intelligence & Digital Communication through AI Corporate Skills: Procurement, Tendering, Negotiation, Business Development, Financial Planning, Administration & Office Management Soft Skills: Customer Service, Branding, Team Building Programmes, Intrapreneurship Entrepreneurship: Sales & Marketing, Branding, Entrepreneurship Skills, Financial Sustainability for Business Passion in Education & Training Navin is dedicated to lifelong learning and fostering digital readiness in individuals. He champions education and skills training that aligns with the demands of a rapidly evolving digital landscape. His mission is to empower individuals to thrive in today’s competitive world, contributing to national development through innovative education platforms and workforce development initiatives.