99 Data Breaches: The Trouble With Third Party Sources

An organisation must take care if it collects personal data about an individual from the individual themselves or from someone else - that is, from a third-party source or non-commercial referrals.

The data protection law applies to both the collecting organisation and the third-party.

The data protection law does not apply to an individual acting in a personal or domestic capacity.

In some countries, the data protection law does not apply to “business contact information” in a business card.

The organisation who collects the personal data must notify the individual of the purpose of the collected personal data.

Consent has been given for the relevant purpose

Written documentation should be kept of consent given.

The data protection law requires an organisation to make a reasonable effort to ensure that the personal data it collects is accurate and complete.

-----------------------

https://www.dpexnetwork.org/

The Data Protection Excellence (DPEX) Network is the first of its kind facility in the ASEAN region whose aim is to provide leadership, best practices, training, research and support for all things surrounding data privacy from an operational perspective.

This collaboration of partnerships comprises certification bodies, law firms, universities and organisations who provide professional services and technologies relating to data privacy.

An ever-growing network of certification and learning bodies, members currently include Straits Interactive, De La Salle University, Philippines, International Islamic University of Malaysia, National Institute of Development Administration - NIDA, Thailand, Singapore Management University Academy and Telkom University, Indonesia, IAPP, EXIN and OCEG.

The DPEX Network is honoured to have the following Independent International Advisors on the panel, who volunteer their services to guide the community in their competency and compliance journey in the region. 

~~~~~~~~~~~~~

https://www.straitsinteractive.com/

Straits Interactive delivers end to end governance, risk and compliance solutions that enable businesses to create a trusted business environment and achieve responsible marketing, especially in the area of data privacy and protection.

We help businesses achieve operational compliance and manage risks through a combination of cloud technology and professional services and enable platform interactions. By adopting a life-cycle approach to operational compliance and risk management, organisations are able to:

Assess risks and compliance status

Protect against these risks and implement policies/practices

Sustain compliance efforts through audits, training and ongoing monitoring

Respond to queries or incidents

#PDPA, #PDPCguidelines #PDPAbreach