Data Protection Executive
The Data Protection Executive assists in executing data governance policies and procedures. He/She is responsible for handling queries, complaints and disputes on the organization’s management of personal data. He collaborates with business and project teams to support business objectives and strategies and align them with the organizations’s data protection guidelines and policies. He manages risks and data breach incidents. He is also responsible for driving awareness of the Personal Data Protection Act requirements in the organization. He works in a team setting and is knowledgeable of data governance, compliance and data protection policies and frameworks. He is also well versed in data breach mitigation techniques and procedures. He should be familiar with the requirements of the Personal Data Protection Act 2012. As one who is responsible for handling queries, complaints and disputes on the organization’s management of personal data, the Data Protection Executive is confident in making critical decisions and providing quick and impactful resolutions.
Skills and Competencies
Technical Skills & Competencies
Generic Skills & Competencies
Critical Work Functions and Key Tasks
• Monitor and ensure the organisation’s compliance with the PDPA
• Ensure data requests are logged in accordance with organisational procedures
• Update and maintain a register of data owners for the organisation’s data sets
• Carry out data flow reviews and create data flow maps for the organisation’s data life cycle and data processing
activities
• Maintain data flow maps for processes across the organisation’s data lifecycle and data processing activities
• Maintain data protection policies and procedures
• Report all suspected and/or confirmed data breaches in accordance with the data breach management plan
• Prepare notifications to affected individuals, senior management and regulatory authorities in the event of data
breaches
• Document data breach incidents and post-breach responses in accordance with the data breach response plan
• Support the data incident response and data breach notification procedures
• Assist in the conduct of investigations relating to data protection breaches
• Promote continuous training to maintain the organisation’s awareness of PDPA requirements
• Keep abreast of PDPA requirements and amendments to regulations and guidelines
• Provide advice to staff on the organisation’s data protection procedures and policies
• Participate in simulation exercises to test the data breach response plans
• Manage programmes to raise awareness of and training to deliver compliance to foster a data protection culture
• Promote and create awareness on due diligence policies and frameworks across teams in the organisations
• Respond to queries that may arise in the organisation’s collection, use and/or disclosure of personal data
• Maintain logs of queries, complaints and disputes relating to the organisation’s collection, use and/or disclosure
of personal data
• Escalate complaints and disputes relating to the organisation’s collection, use and/or disclosure of personal data