8:50

Chair`s Welcoming Remarks

Noriswadi Ismail, Co-Founder/Managing Consultant, Quotient Consulting (QC); Executive Director/Head of Data Protection Academy (DPA) Advisory Board, DPA LLP

9:00

Opening of conference by the Honourable Dato’ Sri Ahmad Shabery Cheek, Minister of Multimedia & Communications Malaysia (invited)*

*Subject to further changes

9:10

Keynote Address

Tuan Haji Abu Hassan Ismail, Malaysian Personal Data Protection Commissioner, Jabatan Perlindungan Data Peribadi (JPDP)

9:30

Panel Session: Data Protection Commissioners’ perspectives on post sunrise period: Issues and challenges

Jurisdictions and marketplace experience: Malaysia, Korea, Japan and Canada

• Results of Malaysia’s JPDP consultations: guidelines on registration and access, outreach and enforcement plans
• The Korean regulatory perspective: compliance pitfalls with privacy laws and dealing with new trends such as Big Data and the Right to be Forgotten
• Japan`s case in streamlining a privacy mark and legal compliance system
• How Privacy by Design will help Southeast Asia and Asia-Pacific data protection regime and marketplace
• Future direction for the Commissioners and the overall marketplace: adopting a 360-degree data protection leadership

10:05

1-2-1 Data Protection Insights: Applying the Council of Europe`s data protection modernisation best practices to non-European jurisdictions

Jurisdiction and marketplace experience: EU

Moderator: Noriswadi Ismail

Sophie Kwasny

Head of Data Protection Unit

Council of Europe, Strasbourg

10:25

Refreshment Break

10:40

Panel Session: Roundtable discussion with Data Protection Experts

Jurisdictions and marketplace experience: US, EU and APAC (Malaysia)

• Comparative analysis of the data protection laws in Asia and ‘bad practices’ to avoid
• Implications of cloud computing for data protection in business
• How can corporations minimise conflict with other sector-specific legislations?
• What are the effects of cross border data protection enforcement on business?
• Data transfer from Asia to Europe and to data havens: various approaches of data interoperability. Which one to choose and why?
• Relationship management with the Data Protection Commissioner and sector-specific regulators

11:55

Privacy Governance Q&A (Recorded Video)

Jurisdiction and marketplace experience: APAC (Australia)

Malcolm Crompton

Managing Director

Integrity Solutions Pty Ltd

Former Privacy Commissioner, Australia

12:10

Implementing accountability - A pragmatic framework

Jurisdictions and marketplace experience: Global

• A practical understanding with examples of how to implement accountability within an organisation
• Tools and templates for implementing an accountability-based approach within an organisation
• The fundamental components of a privacy program required for an organisation to be accountable

Karina Neumann

Director,

Nymity

12:40

Networking Luncheon

13:30

Panel Session: Opt in and opt out: Different principles, different approaches?

Jurisdictions and marketplace experience: EU and APAC (Malaysia)

• Sector-specific approaches in opt in and opt out

• Streamlining consent from the user as well as business perspectives
• Evaluating the advantages and disadvantages of blanket consent, periodic consent and one-off consent
• Strict legal interpretation, best practices and self-regulation – strictly consent-based or tailor-made mechanisms?
• Global approaches in opt in and out: lessons and best practices from the EU and Asia-Pacific regimes
• Assessing the viability of deploying technology as a platform to opt in and opt out

14:20

1-2-1 data protection insights: Data Centre and the cloud industry

Marketplace experience: Malaysia and ASEAN (in general)

Moderator: Noriswadi Ismail

Tan Tze Meng

Head, Ecosystem Planning and Development Department, Digital Enablement Division,

Multimedia Development Corporation (MDeC)

Chan Chuey Hwye

Manager, Ecosystem Planning and Development Department, Digital Enablement Division,

MDeC

14:40

Latin America and Caribbean data protection developments and the lessons for Asia (Recorded Video)

Jurisdictions and marketplace experience: Latin America and the Caribbean

Alex Bryant

CIPP/E, Privacy Analyst, Asia-Pacific, Latin America & Caribbean

DataGuidance

15:00

Panel Session: Building a world-class data protection team: Too ambitious or too soon for Asia?

Jurisdictions and marketplace experience: US, EU, APAC, ASEAN and Middle East

• Reskilling talents to master data protection – one off or recurring exercise?

• The importance of training the trainer and coaching professional advisers
• Best practices to strategise and manage the data protection team: comparing in-house versus external professional advisers, planned versus real-time set-ups
• Practical issues and ways forward to get certified and streamline continuous training

15:35

1-2-1 data protection insights: Operationalising Personal Data Protection Act 2010: Shell`s experience in implementing internal privacy policies

Marketplace experience: Malaysia

Moderator: Noriswadi Ismail

Lily Khairi

Head of Legal,

Shell

Amir Zhariff Abdullah

Legal Counsel,

Shell

15:55

Refreshment Break

16:10

Panel Session: The “Appification” of society – the dominance of mobile and tablet applications and the implications for data protection

Jurisdictions and marketplace experience: UK, EU, Malaysia and the US

• What have developers overlooked in data protection issues for mobile apps?
• The consumers and users’ experience in managing your data protection in the virtual world
• Selected approaches to Privacy Impact Assessment in the development stage of apps
• Mitigating potential data security breach risks: the apps in context
• Guidance for developers, consumers, users and business
• Reconciling digital economy initiatives (eg. Digital Malaysia) with data privacy laws

17:20

Panel Session: Managing data protection in employer-employee context and in working place

Jurisdictions and marketplace experience: Malaysia and best practices from other leading jurisdictions

• Conducting Privacy Impact Assessment on the flow of information between employers and employees
• Should companies incorporate data protection clauses in their Human Resource policy?
• Data access best practices in the employment context
• A close look at data retention and deletion of employees’ data
• Policies versus execution: issues and directions
• Examining the pros and cons of implementing a Code of Practice, a Guidance, Regulations or Orders

18:00

Chair`s Closing Remarks

18:05

End of the Data Protection Conference 2014