Personal Data Protection Act (PDPA) 2010 and Standards 2015 and Implementing Compliance

This training delivers a comprehensive understanding of the Personal Data Protection Act (PDPA), tailored to meet the diverse needs of various sectors and industries. During this one-day training, participants will gain proficiency in the following essential areas:

• Fundamentals: Understand the basic concepts of the PDPA and its significance in protecting personal data in Malaysia.
• Key Principles: Learn the core principles of the PDPA, including consent, purpose limitation, and data minimization.
• Roles and Responsibilities: Identify the roles of data users, data processors, and their obligations under the PDPA.
• Rights of Data Subjects: Recognize the rights of individuals regarding their personal data, including access and correction rights.
• Compliance Requirements: Gain knowledge of the essential compliance requirements organizations must adhere to under the PDPA.
• Data Protection Policies: Learn how to develop and implement effective data protection policies within organizations.
• Handling Data Breaches: Understand the procedures for managing data breaches and the necessary reporting requirements.
• Practical Scenarios: Analyze real-world scenarios to apply PDPA principles and make informed decisions regarding data protection.
• Data Transfer Regulations: Explore the regulations surrounding the transfer of personal data, both locally and internationally.
• Impact Assessment: Learn to conduct data protection impact assessments to evaluate risks associated with data processing activities.
• Training and Awareness: Understand the importance of training staff on PDPA compliance and fostering a culture of data protection.
• Monitoring Compliance: Develop skills to monitor and ensure ongoing compliance with PDPA regulations within the organization

Data Protection Officers, Compliance Officers, Managers, HR Personnel, Administrators, IT Staff, Legal Advisors, and all personnel involved in handling personal data are the intended audience for the PDPA training course. They will be integrating PDPA compliance into their roles within their respective industries to enhance data protection practices and ensure adherence to legal requirements."

9.00AM - 10.30AM 
Module 1: Introduction to PDPA

• Overview of the PDPA
• Importance of Personal Data Protection
• Scope and Applicability of the Act

Module 2: Key Principles of PDPA

• Consent and Purpose Limitation
• Data Minimization and Accuracy
• Retention and Security of Personal Data

Activity: Group Discussion, Personal Data Game

10.30AM - 10.45AM Break

10.45AM - 1.00PM 
Module 3: Roles and Responsibilities

• Understanding Data Users and Processors
• Obligations under the PDPA

Module 4: Rights of Data Subjects

• Access and Correction Rights
• Right to Data Portability
• Right to Withdraw Consent

1.00PM - 2.00PM Lunch

2.00PM - 3.30PM 
Module 5: Compliance Requirements

• Key Obligations for Organizations
• Implementing Data Protection Policies
• Training and Awareness Initiatives

Module 6: Handling Data Breaches

• Identifying Data Breaches
• Reporting Requirements and Procedures
• Response Strategies for Data Breaches

3.30PM - 3.45PM Break

3.45PM - 5.00PM 
Module 7: Practical Applications and Case Studies

• Analyzing Real-World Scenarios
• Application of PDPA Principles in Practice
• Developing Action Plans for Compliance

Navin Manghan Dewandas
Legal & Business Consultant | Senior Corporate Trainer | Digital Transformation Advocate

Professional Summary
Navin Manghan Dewandas is an accomplished legal and business consultant, senior corporate trainer and digital transformation advocate with more than 23 years of experience across legal, regulatory and compliance, corporate business and education management sectors.
He is a key driver in the creation and execution of education and talent development platforms aligned with government grants, digital economy agendas and corporate learning frameworks. He is known for his strategic insight, innovative thinking and ability to build strong partnerships with government agencies, GLCs, MNCs and international stakeholders.

Qualifications and Certifications

• HRD Corp Accredited Trainer (valid 5 February 2025 to 5 February 2028)
• Certified Data Protection Officer (CertDPO), Convergence Certification and Skill Development Council (CCSD), 2025
• Professional Diploma in International Arbitration, MIArb (Post Graduate), 2011
• LLB (Hons), University of Hertfordshire, UK, 2010
• Train the Trainer certification, 2023

Professional Experience
Senior Manager, Business Development, BAC Education Group
Leads key initiatives in Digital Transformation, Industry 4.0 and Digital Business by offering accessible education and skills-based training platforms to individuals, corporate clients and government stakeholders. Builds and nurtures partnerships with GLCs, MNCs and ministries, leveraging available government grants and funding to support Malaysia's human capital development and future-ready workforce initiatives.

Regulatory Legal & Compliance Manager and Business Director, MULA Advisory Sdn Bhd (formerly Jirnexu Advisory Sdn Bhd)
July 2022 to December 2023. Provided leadership in compliance, legal and business development within the financial services and capital market sectors. Responsibilities included ensuring regulatory compliance, overseeing legal documentation and M&A risk management, conducting risk assessments, driving ethics and compliance culture, managing stakeholder engagement, and expanding business through strategic planning and marketing across local and international markets.

Vice President, M.I.T Academy Sdn Bhd
Managed legal affairs, marketing, recruitment and business growth strategies, driving nationwide TVET training programmes including across Sabah and Sarawak, and initiating the setup of the company's International School.

Chief Business Development Officer (CBDO) and Co-Founder, STEMERA Sdn Bhd
Served concurrently at this EdTech startup co-founded by M.I.T Academy, focused on bridging the skills gap through a digital learning and employment platform. His work has been featured at global conferences including RISE Conference 2018 (Hong Kong) and Blockchain Consensus 2018 (Singapore).

Training Specialisations

• Legal Practices: Business Law, Contract Law, Compliance, Intellectual Property, Privacy Policies, PDPA, ABAC, AMLA, Arbitration
• Digital Transformation: Google Workspace, Digital Sales Adoption, Collaborative Intelligence and Digital Communication through AI
• Corporate Skills: Procurement, Tendering, Negotiation, Business Development, Financial Planning, Administration and Office Management
• Soft Skills: Customer Service, Branding, Team Building, Intrapreneurship
• Entrepreneurship: Sales and Marketing, Branding, Entrepreneurship Skills, Financial Sustainability for Business

Training Philosophy
Navin believes that education is a powerful catalyst for personal growth, organisational excellence and societal progress. As an experienced trainer and learning strategist, he is passionate about bridging the gap between knowledge, skills and practice by delivering engaging, industry-driven programmes in emerging and critical domains. Through his commitment to continuous learning, digital transformation, learning and development, and continuous professional development, he inspires individuals to embrace change, cultivate resilience and build the competencies required to excel in the future world of work.

Selected Clients (2025 and 2026)

Government agencies, GLCs and public bodies: PERNAS (Perbadanan Nasional Berhad), Malaysian Digital Economy Corporation (MDEC), MRANTI, Malaysian Employers Federation (MEF), Pos Malaysia, Padiberas Nasional Berhad, Sarawak Metro Sdn Bhd, Universiti Malaya
Corporate clients: IJM Corporation Berhad, Vantris Energy Bhd (Sapura Energy), Ram Holdings Bhd, Pacific and Orient Insurance Co Bhd, FGV Plantation Sdn Bhd, FGV Kernel Products Sdn Bhd, Volvo Car Malaysia Sdn Bhd, Panasonic Industrial Devices Sdn Bhd, Toshiba Transmission and Distribution Systems Asia Sdn Bhd, Amway Malaysia Sdn Bhd, Vistra Group of Companies, Wasco Energy, Brunei Methanol Company Sdn Bhd, Dayang Enterprise Sdn Bhd, Cement Industries of Malaysia Berhad, NEXG Berhad, InNature Berhad, Etika Holdings, UCSI Hospital, Corus KLCC Hotel, KK Mart Superstore, and others
Education and training partners: BAC Education Group, Brickfields Asia College, Auto Prima College, Cognetive Education Solutions, Comfori Training, Global Codex Consultancy, Apex Skillworks Consultancy, Beyond Vision Solutions
International engagements: Rural Area Agency (Ministry of Tanzania), Ministry of Law, Kenya (Legislators Group), Erami Consultancy (Turkey)

Or

Balakrishnan Rajagopal
HRD Corp Accredited Trainer (Trainer ID: 11474)
Anti-Corruption and Integrity | Personal Data Protection | Ethical Leadership | Regulatory, Governance and Compliance

Professional Summary
Balakrishnan Rajagopal is an HRD Corp Accredited Trainer with more than 23 years of corporate sector experience across telecommunications, energy, maritime education and legal practice, specialising in governance, integrity, anti-corruption, compliance, regulatory affairs and personal data protection.

He has headed Regulatory and Government Affairs functions in the telecommunications industry, led anti-bribery and anti-corruption initiatives and integrity programmes aligned with Section 17A and the T.R.U.S.T. Principles, and successfully transformed compliance and operational functions. He has conducted engagements with regulators, government agencies, industry bodies, NGOs and CSOs, and is an experienced trainer, speaker and facilitator in governance, integrity and data protection.

Qualifications and Certifications

• Doctor of Business Administration (DBA), International University of Malaya-Wales: passed viva with minor corrections, pending Senate approval
• Master of Laws (LL.M), Universiti Malaya, 2001
• Bachelor of Laws (LL.B Hons), University of Wolverhampton, 1995
• Certified Integrity Officer (CeIO), Malaysian Anti-Corruption Academy (MACA), accreditation extended 12 February 2026
• Certified Data Protection Officer (CertDPO), Convergence Skills and Development Council (CCSD), 2025
• HRD Corp Accredited Trainer, valid 14 April 2025 to 13 April 2028
• MOHE Teaching Permit (Permit No. PM/IPTS/2025/12/2900)
• Training of Trainers (TOT) KIAR, UKM, KPT and SPRM, January 2026
• ISO 37001:2016 Anti-Bribery Management Systems Lead Auditor training (Certificate of Completion, 2021)
• Diploma in Governance and Compliance, Basel Institute on Governance, 2020

Professional Experience
Trainer, Consultant and Practitioner (August 2026 onwards)
Providing training, consultancy and advisory services on governance, ethics, anti-corruption, compliance, regulatory affairs and personal data protection.

Head, Regulatory and Government Affairs, XOX Bhd (2021 to July 2026)
Led regulatory, compliance and stakeholder engagement across governance, data protection and industry matters. Secured regulatory approvals supporting business growth.

MISC Berhad Group, Energy and Maritime Education (2003 to 2021)
Held key leadership roles across maritime education, business planning, finance and legal.

Advocate and Solicitor, General Litigation Practice (1997 to 2003)
Provided legal advisory and representation in civil and commercial matters.

Areas of Expertise

• Governance, Ethics and Integrity
• Anti-Bribery and Anti-Corruption (ABAC)
• Section 17A and T.R.U.S.T. Principles
• ISO 37001 Anti-Bribery Management Systems
• MS 2764:2022 Corruption Risk Management
• Personal Data Protection (PDPA)
• Ethical Leadership, Organisational Culture and Change Management
• Regulatory Affairs and Compliance
• Cybersecurity (coming soon)

Research, Publications and Thought Leadership

Doctoral research (in progress): Corporate Governance, Forward Looking Information Disclosure, and the Moderating Effect of ISO 37001 Anti-Bribery Management Systems: Evidence from Malaysian Public Listed Companies (Doctor of Business Administration, Universiti Malaya-Wales)

Selected publications and conference presentations:

• 2026: Integrity Under Fire: Rebuilding Ethical Governance and Accountability in Malaysia's Defence Institutions (Common Law Journal)
• 2025: Corporate Governance, ISO 37001, and Forward Looking Disclosures: A Systematic Review (International Conference on Integrity and Anti-Corruption, ICIA, Malé, Maldives)
• 2024: A Systematic Review: Corporate Governance and Forward Looking Information Disclosure (Advanced Research Journal of Business Management, ARJBM)
• 2014: Stalwart in Sailing Global Maritime Women Leadership (Maritime Women: Global Leadership Conference, Malmö, Sweden)
• 1993: Kewibawaan Bahasa Melayu dalam Menjamin Keadilan (INSAF: The Journal of the Malaysian Bar)

Thought leadership: more than 300 professional articles and reflections on LinkedIn (2022 to 2026) covering anti-corruption, integrity, corporate governance, ethics, personal data protection, and cybersecurity and AI.

Speaking Engagements
Multimedia University (MMU), Monash University Malaysia, Universiti Tenaga Nasional (UNITEN), INTI International University and Ismail School (2), Muar.

Corporate Clients and Engagements
RHB Bank, Monash University Malaysia, Multimedia University, ABAC Centre of Excellence, Universiti Malaya-Wales, INTI International University, Universiti Tenaga Nasional, Coalition for Business Integrity, Malaysian Direct Sellers Association (MDSIDA), Peterson Business and Solutions, ISEC, Jasa Merin, MXM International, and others.

Or

We have a faculty of  specialist and can cater to your organisation's different levels and specific needs.
For training and advisory services, feel free to contact us at info@itrainingexpert.com or call us at +603 8082 3707 | +603 8074 9056 | +6012 6869 628 | +6018 2175 123    

"Before attending the training, I felt indifferent and uncertain about what to expect. During the course, I gained valuable insights and practical knowledge that were easy to understand and apply. By the end, I felt confident and ready to implement what I had learned." - NOR AMALINA BINTI AHMAD DAMAN HURI, CHAILEASE BERJAYA CREDIT SDN BHD

"Before joining the course, I recognized the need to improve my understanding of the topic and its relevance to my daily work. During the training, I discovered how crucial these concepts are to my responsibilities and learned practical ways to apply them. After completing the course, I feel empowered with new knowledge and ready to use it effectively." – NUR HANISAH BINTI JUFRI, CHAILEASE BERJAYA CREDIT SDN BHD

"Initially, I was nervous about attending the course, unsure if I could keep up with the material. However, during the training, I gained a clear understanding of the Personal Data Protection Act (PDPA) and its practical applications. By the end, I felt genuinely happy and more confident in my grasp of the subject." – MUHAMMAD AFIQ BIN KABLAN, CHAILEASE BERJAYA CREDIT SDN BHD

"Before the training, I had very limited knowledge about PDPA and compliance. Throughout the course, I learned not only the theoretical aspects but also how to implement compliance measures effectively. After the course, I feel far more knowledgeable and equipped to handle compliance issues in my role." – MUHAMMAD IKRAM BIN MOHD ISHAK, CHAILEASE BERJAYA CREDIT SDN BHD

Upon successful completion of this program, you will receive a Certificate of Achievement.

• Online Payment by Credit card: You can opt to register and pay online with our latest payment integration system through our website.
• Bank Transfer- You can also opt to use GIRO or telegraphic transfer of payment via international banks.
• HRD Corp Claimable Courses Skim Bantuan Latihan Khas - Applicable to Malaysian Employer Only

We'd happy to help.
Feel free to talk to us today, however most suitable for you.
Mobile call/ whatsapp: +6012 6869 628 | +6018 2175 123
Office: +603 8074 9056
Email: info@itrainingexpert.com
Website: www.itrainingexpert.com