The Competency Checklist for Your Data Protection Officer

Following recent amendments to the Personal Data Protection Act (PDPA), it is now mandatory for certain Malaysian companies to appoint a Data Protection Officer (DPO). With the deadline having passed on June 1st, are you compliant, and what does this new role actually entail for your business?

Tech lawyers Ong Johnson and Lo Khai Yi from Halim Hong & Quek join us to break down the new guidelines from the Personal Data Protection Commissioner. They explain who needs to appoint a DPO, the core functional roles of the position, and the different pathways to achieving compliance.

We discuss:

• The specific criteria for when a company must appoint a DPO.

• The 6 core functional roles and responsibilities of a DPO.

• The difference between "Fundamental" and "Advanced" DPO competency.

• The legal distinction between a "data controller" and a "data processor."

• The three pathways for compliance: outsourcing, a hybrid model, or upskilling.

  For business owners, directors, and legal teams, this is an essential and urgent guide to navigating Malaysia's new data protection landscape.

See omnystudio.com/listener for privacy information.