OneTrust Data & Privacy Management’s Post

🚨 Are You Ready for the Thai PDPA? 🚨 Thailand's Personal Data Protection Act (PDPA) is officially here, marking a crucial milestone in the country's data privacy landscape. This law isn’t just a checkbox—it’s a comprehensive framework to safeguard personal data. Businesses need to act now to understand and comply with its requirements to avoid hefty penalties. We’ve simplified the complexities in our FREE eBook to help you stay ahead: 📖 What’s Inside: 🔍 A clear overview of the Thai PDPA and its key requirements 📚 Essential definitions every business needs to know 👥 Guidance on data subject rights and appointing DPOs ⚖️ A breakdown of penalties for non-compliance Don’t risk non-compliance. Empower your business to meet these new standards today. 👉 Download your free eBook here: https://lnkd.in/gZ44XyU6 #ThaiPDPA #DataProtection #PrivacyCompliance #DataPrivacy #Thailand

On December 13, the Brazilian Data Protection Authority (BDPA) began an inspection process involving 20 large companies that failed to indicate the contact person for the processing of personal data, as required by Article 41 of the General Personal Data Protection Law (LGPD). According to the provision, “the controller must appoint a person in charge of processing personal data”, and in this way, the BDPA indicates that the inspection aims to ensure that the companies notified comply with the legal requirements, regularizing the appointment of a person in charge or a functional communication channel. Want to know more? Access the full article on the IDS website by clicking on the link: https://lnkd.in/dRrt2R2G

📢 New Article Alert! 📢 We are thrilled to share another insightful article penned by our Director of Corporate Secretarial, Nicholas Ngoh, LLB (Hons), on "Understanding the 11 Key Obligations Under Singapore's PDPA." In today's digital age, safeguarding personal data isn't just a legal requirement—it's a cornerstone of ethical business practices. At PKF-CAP, we understand the importance of adhering to the 11 key obligations under Singapore's Personal Data Protection Act (PDPA). These obligations ensure that personal data is handled with the utmost care, transparency, and accountability, building trust with our clients and protecting our reputation. Read more at: https://lnkd.in/e-pi9rTX Concerned with personal data protection for your organisation? Need assistance with the appointment of a DPO? Chat with our business solutions team today at cs_bizsolutions@pkf.com . Focus on business – leave the rest to us! 👍 #PKF #PKFCAP #DataProtectionOfficer #PDPA #Trust #Compliance #BusinessSolutions #CorporateSecretarial

Vietnam: Law on Personal Data Protection is officially in the pipeline The issuance of the PDP Law will help to, among others, solve the potential conflicts between the current Vietnam Personal Data Protection Decree/Decree 13 and other existing regulations on personal data protection, such as the Law on Consumer Right Protection. However, the passage of the PDP Law is likely 2+ years away. The Vietnam Ministry of Public Security (MPS) published on 29 February 2024 its first version of the dossier proposing the development of the Law on Personal Data Protection ("PDP Law") on the government's official website for public consultation. This is one of the initial steps to kick off the drafting and enactment processes of the new Vietnam PDP Law. Read more about our recent client alert below for the key takeaways provided by our partner Manh-Hung Tran 陈孟雄, senior associate Minh Nguyen, and Tuan Nguyen Huu. #bakermckenzie #dataprotection #VietnamPDPLaw https://lnkd.in/gNrdCPj5

What is the Personal Data Protection Act (PDPA)? The PDPA is Singapore’s main legislation governing data protection. It regulates the collection, use, disclosure, and care of personal data. Every business that deals with personal data must comply with this law to safeguard individual privacy. Key principles of PDPA include: 1. Consent: Organizations must obtain consent before collecting or using personal data. 2. Purpose Limitation: Data must only be used for a specified purpose. 3. Access and Correction: Individuals have the right to access and correct their data. Learn more about how the PDPA affects your business and why having a DPO is critical. #PDPA #DataPrivacySG #DataProtectionLaws

PDPL Compliance is Now Fully Enforceable: Are You Prepared? 🛡️ The Personal Data Protection Law (PDPL) came into force on September 14, 2023, and is now fully enforceable as of September 14, 2024. During the grace period, the Saudi Data & Artificial Intelligence Authority (SDAIA) issued crucial guidelines to help organizations meet their compliance obligations. Now is the time to ensure your data privacy practices align with the latest requirements. Our latest post dives into these updated SDAIA guidelines, outlining essential compliance steps and best practices to help your organization stay ahead. Whether you’re just starting your compliance journey or refining your privacy strategy, understanding these guidelines is key to building trust and avoiding potential penalties. 📌 What’s Inside? 🔍 A breakdown of the latest SDAIA guidelines 📋 Key compliance requirements you need to meet Don’t wait until it’s too late—ensure your organization is ready for the fully enforceable PDPL. Let’s build a compliant and privacy-centric future together! #PDPLCompliance #SDAIAGuidelines #DataProtection #pdpl #dataprivacy #dataprotrction #dataprotectionoffficer

BONES OF CONTENTION UNDER THE DRAFT LAW ON PERSONAL DATA PROTECTION The Ministry of Public Security of Vietnam (MPS) has recently issued the draft of the Personal Data Protection Law to regulate matters pertaining to the safeguarding of personal data. In general, this draft offers a comprehensive legal framework and guidelines regarding the data protection matter in Vietnam and MPS’s endeavors to contribute to data safety. However, it presents several ambiguities that require careful scrutiny and amendment in future versions. While many provisions remain consistent with Decree 13, such as the 11 rights of data subjects, privacy notices, and consent requirements, there are multiple areas that demand further clarification: #data #protection #law #Vietnam #lawfirm #VTN

The Urgency of Personal Data Protection (PDP) Law event, held on November 21, 2024, was a success! We are grateful to our expert speakers, Mr Anton Setiawan and Mr Syahrul Mubarak, for sharing invaluable insights on the best practices and strategies for corporate compliance with PDP laws. Attendees walked away with a deeper understanding of how to safeguard personal data, mitigate risks, and ensure legal compliance in today’s digital landscape. Thank you to everyone who joined us – let’s continue prioritizing data protection in our businesses! #PERSOLKELLYIndonesia #PDPSeminar #PDPCompliance #DataProtection #CorporateBestPractices

#Malaysia - Following the passing of the Personal Data Protection (Amendment) Bill in July 2024, 3 public consultation papers have been issued in relation to the implementation of the following impending new legal obligations. 1. Notifying the #PersonalData Protection Commissioner and affected data subjects for personal #databreaches. 2. Appointing #dataprotection officer(s). 3. Effecting the data subject's right to #dataportability. These public consultation papers shed light on what may be required for compliance while allowing the public to contribute to the final draft of these subsidiary instruments. My colleagues Kherk Ying Chew, Serene Kan and Chun Hau Ng outline some key considerations in this alert. #bakermckenzie

Thailand’s PDPA was enacted on June 2022. It is based on the GDPR and was drafted with training and guidance from EU comission. The key similarities are 1. Scope : Both laws apply to organisations that process personal data of individuals regardless of where the organisation is located 2. Definitions : Both laws use similar definitions for key terms such as ‘personal data’ , ‘data controller’ and ‘data processor’. 3. Legal basis : Both laws require organisations tp have a legal basis for processing personal data and last but not least 4.Data protection officer(DPO) :Both laws require certain organisations to appoint a DPO with a common core set of skills. I’m happy to share that I’ve obtained a Data protection officer (lv.5) certificate from Thailand Professional Qualification Institute! in cooperated with DBC Group Co.,Ltd in order to ensure the competency of Data protection skill set for DPO Thank you to Control Union Thailand that realize the importance of PDPA and GDPR with continue resource support for this achieve.