Data Protection Executive

Ensure organisation’s compliance to Personal Data Protection Act (PDPA)

• Monitor and ensure the organisation’s compliance with the PDPA
• Ensure data requests are logged in accordance with organisational procedures
• Update and maintain a register of data owners for the organisation’s data sets
• Carry out data flow reviews and create data flow maps for the organisation’s data life cycle and data processing activities
• Maintain data flow maps for processes across the organisation’s data lifecycle and data processing activities
• Maintain data protection policies and procedures

Manage risks associated with collection, use, disclosure and storage of personal data

• Identify risks and review the proposed standard operating procedures (SOPs) with business process owners to mitigate risks
• Establish monitoring mechanisms to monitor activities and performance of vendors against contract terms
• Identify performance problems or contractual issues relating to personal data processing, and measure the performance of data intermediaries in the fulfilment of service level agreements
• Propose enhancements to risk countermeasures and contingency plans
• Manage contracts with third parties and data intermediaries for products and services
• Assist users on the various techniques that an organisation can use to anonymise personal data

Manage data breaches

• Report all suspected and/or confirmed data breaches in accordance with the data breach management plans
• Prepare notifications to affected individuals, senior management and regulatory authorities in the event of data breaches
• Document data breach incidents and post-breach responses in accordance with the data breach response plans
• Support the data incident response and data breach notification procedures
• Assist in the conduct of investigations relating to data protection breaches

Drive awareness of PDPA requirements in the organisation

• Promote continuous training to maintain the organisation’s awareness of PDPA requirements
• Keep abreast of PDPA requirements and amendments to regulations and guidelines
• Provide advice to staff on the organisation’s data protection procedures and policies
• Participate in simulation exercises to test the data breach response plans
• Manage programmes to raise awareness of and training to deliver compliance to foster a data protection culture
• Promote and create awareness of due diligence policies and frameworks across teams in the organisations

Handle queries, complaints and disputes on the organisation’s management of personal data

• Respond to queries that may arise in the organisation’s collection, use and/or disclosure of personal data
• Maintain logs of queries, complaints and disputes relating to the organisation’s collection, use and/or disclosure of personal data
• Escalate complaints and disputes relating to the organisation’s collection, use and/or disclosure of personal data

Advise on data innovation projects in the organisation

• Maintain oversight of the organisation’s data assets and taxonomy
• Provide guidance on data protection requirements for data innovation projects
• Assist in the stock-take of the organisation’s data assets
• Adhere to PDPA and other data protection regulations in the conduct of data innovation-related projects
• Assist with external providers and internal stakeholders in data valuation exercises

Governance and Compliance

Review current practices of performing IT-related activities, and propose revisions to service standards and protocols

Governance and Compliance

Conduct audits, analyse results and implement changes to address identified gaps

Business Development

Apply negotiation skills and techniques and documenting negotiations.

Business and Project Management

Identify risks and their business impact and propose measures to manage risks

Business and Project Management

Execute crisis management plans

Governance and Compliance

Apply and uphold principles of professional, legal and ethical conduct, policies and procedures in the handling of data

Governance and Compliance

Collect, use or disclose personal data in accordance with the organisation’s Data Protection Management Programme (DPMP)

Governance and Compliance

Conduct stock-take of the organisation’s data assets

Design and Architecture

Apply design thinking methodologies and execute design thinking processes to challenge norms and conventions in the organisation

Business and Project Management

Oversee small projects or programmes, managing timelines, resources, risks and stakeholdersOversee small projects or programmes, managing timelines, resources, risks and stakeholders

Stakeholder and Contract Management

Serve as the organisation's main contact point for stakeholder communications, clarifying responsibilities among stakholders, and engaging them to align expectations

Operations and User Support

Provide real-time incident and status reporting, and identify affected systems and user groups