The leader track 🤝 · for C-level, managers & marketers who sign off · 6 x 45 min · no jargon
What the law actually requires, where the risk sits, and the decisions only you can make - each session ends with questions to ask your DPO and marketing team.
Why PDPA + DNC matter
The law, the regulator, and the real cost of getting it wrong - data leaks and unwanted marketing, in dollars and trust.
📋Leader 2 · easyThe ten obligations
Consent, purpose, notification, protection, retention, breach notification and the rest - each as the question it puts to your team.
📵Leader 3 · mediumThe DNC layer
Three registers, what counts as a "specified message", and the check-before-you-send duty that trips up marketers.
✅Leader 4 · mediumConsent vs DNC + exemptions
How consent lets you skip the register, and the exemptions - transactional, B2B, ongoing relationship - that decide what is even in scope.
⚠️Leader 5 · decidingBreach & enforcement
The breach-notification clock, the penalty caps, and real PDPC decisions - what actually happened and what it cost.
🏛️Leader 6 · decidingGovernance & accountability
The DPO, the accountability obligation, and the compliance programme that turns one-off effort into a habit.
The practitioner track 🛠️ · for marketers, DPOs & ops · 8 x 45 min · Marina Retail case
The operational half: how to actually comply, day to day, on real campaigns. Every session moves Marina Retail one step closer to an operation that survives an audit.
The DNC check before you send
The three registers, the 21-day rule, and a live checker that rules any scenario compliant or not - and tells you why.
✍️Practitioner 2 · easyCapturing valid consent
Clear-and-unambiguous consent, deemed consent, positive action vs pre-ticked boxes, records, and honouring withdrawal.
📣Practitioner 3 · mediumA compliant campaign end to end
Scope the message, pick consent or a register check, send, and keep the records that prove you did it right.
🪪Practitioner 4 · mediumMessage-ID + calling rules
Sender identity and contact info (s.44), never concealing the calling number (s.45), across voice, SMS, and fax.
🧩Practitioner 5 · hands-onExemptions in practice
Transactional, market research, B2B, and the ongoing-relationship exemption - which messages fall outside DNC entirely.
🔎Practitioner 6 · hands-onAccess & correction requests
What to hand over, the 30-day rule, permitted refusals, and passing corrections to third parties you shared with.
🚨Practitioner 7 · hardestData breach response
Assess in 30 days, notify the PDPC in 3, notify individuals - the notifiable thresholds and the clock that starts ticking.
🗂️Practitioner 8 · hardestBuilding the compliance system
DPO, policies, a data inventory, staff training, a breach plan, and audits - the accountability artifacts that make it stick.
The running case + the live checker 📵
Marina Retail, and a DNC checker you can poke
The practitioner track follows Marina Retail, a Singapore SME, from "we just blast our customer list" to a marketing operation that survives an audit. Session b1 gives you a live DNC compliance checker: pick a message purpose, channel, consent state, and register check, and it rules the scenario compliant or not - and cites the exact PDPA provision. It encodes the real Part 9 decision logic (educational, not legal advice).
Choose your path 🗺️
Two doors, one course. Leaders get the law and the risk; practitioners get the day-to-day moves that keep you compliant.
The knowledge map 🧠
Both tracks at a glance - hover a session to spotlight its concepts, click any node to jump in.