Training Your Employee and Management Team on Data Privacy and Protection: Guidance on Content and Standards

The NDPC, not too long ago, issued a guidance notice on data privacy and protection training for employees of data controllers and processors (the Notice). Article 30(1) of the NDPA General Application & Implementation Directive (GAID) mandates data controllers and processors to prepare and implement an organisational schedule for internal sensitisation and training on privacy, while Article 46(3) provides that all employees and other persons engaged by data controllers and processors are to be trained periodically on emerging developments in data processing.