Under the Data Privacy Governance Project
Economic and Corporate Governance
31 December 2025
- Develop and periodically review the Record of Processing Activities (RoPA).
- Prepare and maintain Data Flow Mapping for processes involving personal data.
- Review and update Privacy Notices and consent management mechanisms.
- Manage and respond to Data Subject Requests (DSRs) in accordance with PDPA requirements.
- Review and enhance practices for the collection, use, disclosure, retention, and disposal of personal data in line with applicable legal and business requirements.
