This one-day practical awareness training provides participants with essential knowledge of Malaysia’s Personal Data Protection Act 2010 (PDPA 2010), including key updates introduced through the 2024 amendment and the three new JPDP guidelines released in April 2026. PDPA 2010 remains the primary law, while the 2024 amendment introduced mandatory data breach notification and the appointment of a Data Protection Officer. In April 2026, the Department of Personal Data Protection (JPDP) published three additional guidelines covering Data Protection Impact Assessment (DPIA), Data Protection by Design (DPbD), and Automated Decision Making and Profiling (ADMP), which are now part of the compliance landscape for Malaysian organisations. The programme equips participants with the confidence to handle personal data correctly in daily work. No legal background is required.
HRD Corp SBL-Khas Claimable
Understanding PDPA 2010 (with 2024 Amendment & 2026 Guidelines)
Overview of PDPA 2010 and how it applies to organisations, key definitions including personal data, sensitive personal data, biometric data, data controller and data processor, the 7 PDPA principles, updated roles and responsibilities under the 2024 amended Act, and an introduction to the three new 2026 JPDP guidelines: Data Protection Impact Assessment (DPIA), Data Protection by Design (DPbD), and Automated Decision Making and Profiling (ADMP).
Managing Data, Consent & Individual Rights
Data lifecycle from collection to disposal, consent requirements in practical operational terms, individual rights including access, correction and data portability, practical steps when receiving a rights request, and common mistakes when responding.
Data Security and Retention
Security obligations under the PDPA Security Principle, responsibilities of both data controllers and data processors, basic organisational and technical safeguards, managing passwords, emails, cloud storage and physical files, retention and disposal practices, and overview of updated penalties.
Data Breach Awareness and Response
Definition of a personal data breach under PDPA, common breach scenarios in Malaysian workplaces, mandatory breach notification requirements and when they apply, immediate internal reporting steps, and do's and don'ts during incident handling.
PDPA in Daily Operations & 2026 Compliance Updates
Applying PDPA in marketing activities, handling employee records in HR, use of CCTV and monitoring systems, managing third party vendors and data processors, and understanding the role of the Data Protection Officer (DPO). Practical overview of the 2026 JPDP guidelines: when a DPIA is required, what Data Protection by Design means for new systems and processes, and how the ADMP guideline applies to automated decision-making in the workplace.
Final Review and Assessment — knowledge check quiz, recap of key PDPA principles and updated requirements, summary of workplace do's and don'ts, and final Q&A session. Final deliverable: PDPA Starter Compliance Pack.
Continue Learning Online
Follow up the classroom training with one month of our LMS and e-learning platform. Staff complete a short module at their own pace and take a knowledge quiz at the end. Results are sent to management showing who completed and individual scores by department, giving a clear picture of team understanding and compliance readiness.
Minimum Enrolment 1 participant
Duration Half Day (9:00 AM – 1:00 PM) | Full Day (9:00 AM – 5:00 PM)
Venue Online or in-house at client’s office
Level Beginner (no prior experience needed)
Certificate Certificate of Completion awarded upon full attendance
