99 Data Breaches: Beware of Secondary Usage of Personal Data

https://www.dpexnetwork.org/

Some organisations collect additional personal information because it was required by their principal (a third company) for analysis and reporting. Even though the needed information is irrelevant to the service which can be confusing for customers.

Organisations collecting personal data of customers should adopt good practices such as:

1. Notifying customers of the Purpose of collecting, using and disclosing their personal data.
2. Do not collect more personal data than is required for the primary purpose or use it for a secondary unstated purpose or unrelated purpose.
3. Do not use personal data that is collected for a non-marketing purpose to prospect for new customers.

The Data Protection Excellence (DPEX) Network is the first of its kind facility in the ASEAN region whose aim is to provide leadership, best practices, training, research and support for all things surrounding data privacy from an operational perspective.

This collaboration of partnerships comprises certification bodies, law firms, universities and organisations who provide professional services and technologies relating to data privacy.

An ever-growing network of certification and learning bodies, members currently include Straits Interactive, De La Salle University, Philippines, International Islamic University of Malaysia, National Institute of Development Administration - NIDA, Thailand, Singapore Management University Academy and Telkom University, Indonesia, IAPP, EXIN and OCEG.

The DPEX Network is honoured to have the following Independent International Advisors on the panel, who volunteer their services to guide the community in their competency and compliance journey in the region. 

~~~~~~~~~~~~~

https://www.straitsinteractive.com/

Straits Interactive delivers end to end governance, risk and compliance solutions that enable businesses to create a trusted business environment and achieve responsible marketing, especially in the area of data privacy and protection.

We help businesses achieve operational compliance and manage risks through a combination of cloud technology and professional services and enable platform interactions. By adopting a life-cycle approach to operational compliance and risk management, organisations are able to:

Assess risks and compliance status

Protect against these risks and implement policies/practices

Sustain compliance efforts through audits, training and ongoing monitoring

Respond to queries or incidents

#PDPA, #PDPCguidelines #PDPAbreach