PDPA
What is PDPA?
Personal Data Protection Act, data protection legislation enacted by various countries (such as Singapore and Thailand) to regulate the collection and use of personal data.
Terms that appear alongside pdpa
Each of these is named in at least one of the same controls as pdpa. The number is how many controls name both.
- gdpr 37 shared controls
- consent 36 shared controls
- data protection 34 shared controls
- data subject 21 shared controls
- compliance 16 shared controls
- breach notification 14 shared controls
- lawful basis 11 shared controls
- accountability 10 shared controls
Frameworks that govern pdpa
What the standards actually require on pdpa
Requirements naming pdpa across 6 standards, quoted from the control text.
Training + awareness + coordination operationalise UU PDP within Indonesia and across the regional + global regulatory landscape. Training and Awareness: mandatory cyber + privacy awareness training for all staff + role-specific training for IT + security + ex...
IDPdp-Training-Awareness-Coord-ASEAN-SingaporePDPA-APEC-CBPR-GDPR-Art70to76-MoCom-Transition · Indonesia PDP Training + Awareness + Indonesian Representative + Lembaga PDP Transition + Coordination ASEAN/Singapore PDPA/APEC CBPR/GDPR/India DPDP/Cross-Sectoral OJK/BI/BSSN →Cooperate with Personal Data Protection Agency inspections, requests for information, and corrective orders within statutory timelines.
AM-DPA-17 · PDPA Inspections and Cooperation →Per Norwegian PDPA + GDPR Articles 12-22: data subject rights. Requirements include (a) implement Data Subject Rights including Access + Rectification + Erasure + Restriction + Object + Data Portability per GDPR + (b) implement Right to Object specifically for...
NORWAY-2 · Data Subject Rights and Automated Decision-Making →Sections 16-17 of DPDP Act 2023 address cross-border transfer + breach notification. Section 16 Processing of Personal Data Outside India: Central Government may by notification restrict the transfer of personal data by a Data Fiduciary for processing to such...
DPDP-CrossBorder-Transfer-Breach-Notification-Sec16-Sec17-DPBI-72Hour-IT-Act-Coord · DPDP Act Sections 16-17 + Cross-Border Personal Data Transfer + Negative List Approach + Personal Data Breach Notification to DPBI 72 Hours + Cooperation with Adjudication + Coord with CERT-In + IT Act 43A Repeal →When categorising and protecting data consider nature and type of services provided, applicable regulation (e.g. PDPA, GDPR, sector rules), competitive landscape, cost of safeguards versus risk appetite (including data aggregation and volume), and customer exp...
ADMF-3.3 · Apply overarching categorisation considerations →Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...
X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →Questions people ask about pdpa
What is PDPA?
Why is PDPA important for compliance?
Which compliance frameworks address PDPA?
Where can I learn more about PDPA?
See how PDPA applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.