Just because you have stated the purpose for collecting personal data does not mean that the purpose itself is not a justification for collecting the information. Most companies fail to realise this point and come to an assumption when it comes to the collection of such data.While the PDPA regulations require companies to give notice to individuals on the purpose of collection, use or disclosure of their personal information, if the stated purposes are unfair or excessive, you could still potentially be in breach.<ul><li>Do not collect and process personal information for purposes that are based on a mere assumption.</li><li>Be prepared to justify your purpose with evidence.</li><li>Refrain from collecting for offering privileges and benefits that do not exist.&nbsp;</li></ul> https://www.dpexnetwork.org/The Data Protection Excellence (DPEX) Network is the first of its kind facility in the ASEAN region whose aim is to provide leadership, best practices, training, research and support for all things surrounding data privacy from an operational perspective.This collaboration of partnerships comprises certification bodies, law firms, universities and organisations who provide professional services and technologies relating to data privacy.An ever-growing network of certification and learning bodies, members currently include Straits Interactive, De La Salle University, Philippines, International Islamic University of Malaysia, National Institute of Development Administration - NIDA, Thailand, Singapore Management University Academy and Telkom University, Indonesia, IAPP, EXIN and OCEG.The DPEX Network is honoured to have the following Independent International Advisors on the panel, who volunteer their services to guide the community in their competency and compliance journey in the region.&nbsp;~~~~~~~~~~~~~https://www.straitsinteractive.com/Straits Interactive delivers end to end governance, risk and compliance solutions that enable businesses to create a trusted business environment and achieve responsible marketing, especially in the area of data privacy and protection.We help businesses achieve operational compliance and manage risks through a combination of cloud technology and professional services and enable platform interactions. By adopting a life-cycle approach to operational compliance and risk management, organisations are able to:Assess risks and compliance statusProtect against these risks and implement policies/practicesSustain compliance efforts through audits, training and ongoing monitoringRespond to queries or incidents

99 Data Breaches: No, giving a purpose for Collecting Excessive Personal Data may Not avoid trouble

Related

Just one more step! We've sent an email to .
Please check your inbox or spam and open it to activate your account.

99 Data Breaches: No, giving a purpose for Collecting Excessive Personal Data may Not avoid trouble

Related

Just one more step! We've sent an email to .Please check your inbox or spam and open it to activate your account.

Just one more step! We've sent an email to .
Please check your inbox or spam and open it to activate your account.