Personal Data Protection Bill Training - Philippines

Personal Data Protection Bill Training​ Course Outline

Module 1: Introduction to Personal Data Protection Bill (PDP Bill)

• What is PDP Bill?
• Provisions of the Bill
• What is the Need for the Bill?

Module 2: Obligations of Data Fiduciary

• Prohibition of Processing of Personal Data
• Limitation on Purpose of Processing of Personal Data
• Limitation on Collection of Personal Data
• Requirement of Notice for Collection or Processing of Personal Data
• Quality of Personal Data Processed
• Restriction on Retention of Personal Data
• Accountability of Data Fiduciary
• Consent Necessary for Processing of Personal Data

Module 3: Grounds for Processing of Personal Data Without Consent

• Grounds for Processing of Personal Data Without Consent in Certain Cases
• Processing of Personal Data Necessary for Purposes Related to Employment Etc.
• Processing of Personal Data for Other Reasonable Purposes
• Categorisation of Personal Data as Sensitive Personal Data

• Processing of Personal Data and Sensitive Personal Data of Children

Module 4: Rights of Data Principal and Transparency and Accountability Measures

• Right to
  • Confirmation and Access
  • Correction and Erasure
  • Data Portability
  • Be Forgotten
• Privacy by Design Policy
• Transparency in Processing of Personal Data
• Security Safeguards
• Reporting of Personal Data Breach
• Classification of Data Fiduciaries as Significant Data Fiduciaries
• Data Protection Impact Assessment
• Maintenance of Records
• Audit of Policies and Conduct of Processing, etc.
• Data Protection Officer
• Processing by Entities Other Than Data Fiduciaries
• Grievance Redressal by Data Fiduciary

Module 5: Restriction on Transfer of Personal Data Outside India and Exemptions

• Prohibition of Processing of Sensitive Personal Data and Critical Personal Data Outside India
• Conditions for Transfer of Sensitive Personal Data and Critical Personal Data
• Power of Central Government to Exempt Any Agency of Government from Application of the Act
• Exemption of Certain Provisions for Certain Processing of Personal Data
• Power of Central Government to Exempt Certain Data Processors
• Exemption for Research, Archiving, or Statistical Purposes
• Exemption for Manual Processing by Small Entities
• Sandbox for Encouraging Innovation

Module 6: Data Protection Authority of India

• Establishment of Authority
• Composition and Qualifications for Appointment of Members
• Terms and Conditions of Appointment
• Removal of Chairperson or Other Members
• Powers of Chairperson
• Meetings of Authority
• Officers and Other Employees of Authority
• Powers and Functions of Authority
• Power of Authority to Issue Directions, Call for Information and Conduct Inquiry
• Action to Be Taken by Authority Pursuant to an Inquiry
• Search and Seizure
• Co-Ordination Between Authority and Other Regulators or Authorities

Module 7: Penalties, Compensation, and Appellate Tribunal

• Penalties for Contravening Certain Provisions of the Act
• Penalty for Failure to Comply with Data Principal Requests
• Penalty for Failure to Furnish Report, Returns, Information, etc.
• Penalty for Failure to Comply with Direction or Order Issued by Authority
• Penalty for Contravention Where No Separate Penalty Has Been Provided
• Appointment of Adjudicating Officer
• Procedure for Adjudication by Adjudicating Officer
• Compensation
• Compensation or Penalties Not to Interfere with Other Punishment
• Recovery of Amounts
• Establishment of Appellate Tribunal
• Qualifications, Appointment, Term, Conditions of Service of Members
• Staff of Appellate Tribunal
• Distribution of Business Amongst Benches
• Appeals to Appellate Tribunal
• Procedure and Powers of Appellate Tribunal
• Orders Passed by Appellate Tribunal to Be Executable as a Decree
• Appeal to Supreme Court
• Right to Legal Representation
• Civil Court Not to Have Jurisdiction

Module 8: Finance, Accounts, Audit, and Offences

• Grants by Central Government
• Data Protection Authority of India Funds
• Accounts and Audit
• Furnishing of Returns, etc., to Central Government
• Re-Identification and Processing of De-Identified Personal Data
• Offences to Be Cognisable and Non-Bailable
• Offences by Companies and State