Let’s talkThe knowledge to move forward.
October 15, 2026
If a customer asks your company to send their records to a rival provider, identify the request before promising or refusing a transfer. A personal-data access request, a…
Read article ↗
October 15, 2026
Before moving CRM support to an overseas team, map what the team can see, which organisation provides the service and where data may be accessed or copied. The…
Read article ↗
October 15, 2026
After an unsuccessful tender, review the personal data in the bid file against the purposes that still require it. Keep records needed for a genuine continuing business or…
Read article ↗
October 15, 2026
A company should not move a course attendance list into a sales campaign simply because it already has the file. Review what information was collected, the purpose explained…
Read article ↗October 15, 2026
A temporary bookkeeper should receive the payroll information and system permissions needed for the agreed assignment, with a clear owner, secure access and a planned end date. Giving…
Read article ↗October 15, 2026
Before adding a background check to recruitment, a Singapore company should identify what information will be collected, why it is relevant to the role, what the applicant has…
Read article ↗October 15, 2026
When a customer withdraws marketing consent after paying a deposit, stop the affected marketing activity through the relevant systems and clarify any separate request about the service or…
Read article ↗
October 15, 2026
If your customer’s account shows two different addresses, check what each address represents before using one to escalate an unpaid invoice. A billing address, an individual’s correspondence address…
Read article ↗October 15, 2026
When a data protection officer leaves while a customer complaint is unresolved, the company should appoint a responsible replacement or interim owner, preserve the complaint file and ensure…
Read article ↗October 15, 2026
If someone asks for their personal data through a director’s personal email account, the company should route the request to its responsible privacy contact, preserve the original message…
Read article ↗Real people. Right here in Singapore.