Organisations that collect, use and disclose personal data are required to develop and implement policies and practices that are necessary for the organisation to comply with the PDPA. This guide seeks to help organisations develop or improve their personal data protection policies and practices through the implementation of a Data Protection Management Programme (DPMP). Organisations may benchmark their existing personal data protection policies and practices against this guide.

Click here to find out more and click here for the additional resources.

Revisions to Guide (14 September 2021)

The guide has been updated to incorporate best practices in accountability to support organisations' personal data protection policies and processes.