Course Outline
Opening — The Data Moment
- Digital responsibility; personal data as a business, operational, privacy and trust asset; analytics, AI, profiling and automated decisions.
Module 1 — Protection Framework
- PDPA framework, scope, personal data, controller, processor, 2024 amendments, controller registration, DPO awareness and the wider privacy, cybersecurity, data sharing, online safety and AI governance ecosystem.
Module 2 — Seven Principles & Rights Test
- Seven Principles, purpose, notice, choice, disclosure, security, retention, data integrity, access and correction, necessity and proportionality.
- Practical Privacy Notice and rights test.
Module 3 — Accountability & Vendor Test
- Accountability beyond policies; management ownership, DPO, governance, records, contracts, processors, vendors, access and evidence.
- Practical SaaS Vendor Case.
Module 4 — Lifecycle Test
- Collection, use, disclosure, storage, transfer, retention and disposal; minimisation, purpose limitation, third parties, cloud and cross border transfer.
- Follow the Data.
Module 5 — Privacy Risk Test
- Privacy risk, affected individuals, harm, likelihood, severity, high risk, technology, profiling, residual risk and introduction to DPIA.
- Practical HR Facial Recognition DPIA.
Proceed Test
- Apply principles, accountability, lifecycle and privacy risk: Proceed / Modify / Escalate / Reassess.
Module 6 — Protection & Design Test
- Privacy by Design and by Default, minimisation, access, privacy settings, retention, security, transparency and accountability.
- Practical protection and design decisions.
Module 7 — Breach Test
- Breach assessment, escalation, evidence, notification, affected individuals, processors, containment and remediation.
- Practical Breach Decision.
Module 8 — Digital Future & Governance Test
- Automated decision making and profiling, AI and personal data, generative AI, human oversight, agentic AI, accountability, complaints, enforcement and evidence.
Privacy Moment
- Assess → Protect → Respond → Improve.
- Key takeaway: Assess the Risk. Protect the Data. Respond with Confidence.
