DCM

The PDPA establishes a data protection law that comprises various rules governing the collection, use, disclosure and care of personal data.

Consent is considered given when someone voluntarily hands over personal data to an organisation, and they are also able to withdraw the consent anytime.

Organisations are not required to inform customers of the purpose of the data collected.

Organisations can keep the data for as long as there is a business reason to do so and avoid the unnecessary cost to properly dispose of the data.

Do not Call Registry lets you opt out of marketing messages made to your telephone, mobile phone or fax machine.           

It is necessary for organisations to immediately stop sending marketing messages to a recipient when the recipient has notified the organisation that they are registered with the DNC registry.

Organisation that breaches the DNC provisions in the PDPA is liable to a fine of up to $20,000 per offence.

The three steps to mitigate data breaches are, knowing what information you have, being aware of where it is stored and knowing how your data can be at risk.

Malware could be used on a compromised email account to spread more malware to all the contacts saved in the sender’s address book.

Personal data breaches, no matter the scale, can cause considerable damage to business operations, loss of resources, time, reputation and prosecution.