PDPA
Compliance
Personal Data Protection Act (PDPA)
- Collection and Processing of Personal Data
-
- Consent: ASK Management Group will obtain explicit consent from individuals before collecting their personal data through the website.
- Purpose: The collection and processing of personal data will be for specific, legitimate purposes such as event participation registration, newsletter and will not be further processed in any manner incompatible with these purposes.
- Limitation: Only necessary and relevant personal data will be collected and processed, minimizing the data to what is required for event registration purposes.
- Rights of Data Subjects
-
- Access and Correction: Individuals have the right to access their personal data held by ASK Management Group and to request corrections if the information is inaccurate or incomplete.
- Withdrawal of Consent: Individuals have the right to withdraw consent for the processing of their personal data at any time. ASK Management Group will respect and comply with such requests, unless retention is required by law or for legitimate business purposes.
- Security and Protection of Personal Data
-
- Security Measures: ASK Management Group will implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.
- Data Breach Response: In the event of a data breach, ASK Management Group will promptly notify affected individuals and relevant authorities in accordance with PDPA requirements/legal guidelines in Malaysia and other region we operate.
- Transfer of Personal Data
-
- Overseas Transfer: If personal data is transferred outside the jurisdiction of our presence, ASK Management Group will ensure that the recipient provides a comparable level of protection to the data as required under PDPA.
- Accountability and Compliance
-
- Data Protection Officer (DPO): ASK Management Group will designate a Data Protection Officer responsible for ensuring PDPA compliance, handling inquiries, and overseeing data protection practices – corporate@askhrd.com.my
- Training and Awareness: Regular training and awareness programs will be conducted for employees involved in the collection and processing of personal data.
- Consent Management and Records
-
- Records of Consent: ASK Management Group will maintain records of consent obtained for the processing of personal data, including the purpose and scope of the consent.
- Periodic Review: Regular reviews of data processing activities will be conducted to ensure compliance with PDPA requirements.