Data Protection Framework and Standards. ISO 29100, Nymity Accountability and APEC Privacy Framework
Who Should Attend?
This course is ideal for:
Training Partners


LATEST UPDATE
Participants are required to attain a minimum of 75% training attendance and pass the associated assessment in order to be eligible for course fee funding. Click here for more information.
NEXT INTAKE INFORMATION
15 – 16 Mar 2027 [Open for Registration]
Mode of Delivery: In-person
*Online registration will close 5 calendar days before the course start date or once the maximum class size is met, whichever comes first.
This module provides participants with an understanding of data protection principles and frameworks based on common de facto and international standards:
The ISO/ IEC 29100: 2011 Information technology: covers a policy framework, privacy architecture, a privacy capability assessment model as well as a Code of Practice for protection of personally identifiable information (PII) in public clouds acting as PII. Several supporting privacy standards have since been introduced that are extensions to information security.
The Nymity Privacy Management Accountability Framework™ (“Framework”): a comprehensive listing of over 130 privacy management activities from Nymity. The privacy management activities are structured in 13 privacy management categories, and are jurisdiction and industry neutral.
The Madrid Resolution: adopted in 2009 by the International Conference of Data Protection and Privacy Commissioners, it included a joint proposal to bring together multiple approaches to the protection of personal privacy, integrating legislation from all five continents.
Other frameworks: APEC Privacy Framework and Cross Border Privacy Rules.
TOPICS COVERED
This module is part of the Advanced Certificate in Data Protection Principles programme.
Details
PRE-REQUISITE
Participants should preferably have tertiary qualifications and/or at least 3 years of working experience.
At the end of the course, participants will be able to:
As part of the requirement for SkillsFuture Singapore, there will be an assessment conducted at the end of the course. The mode of assessment, which is up to the trainer’s discretion, may be an online quiz, a presentation or based on classroom exercises.
Participants are required to attain a minimum of 75% attendance and pass the associated assessment in order to receive a digital Certificate of Completion issued by Singapore Management University.
For more information on assessment and re-assessment policy, click here.
Advanced Certificate in Data Protection Principles
Participants are required to attain a minimum of 75% attendance and pass the associated assessment for each of the 6 modules within 2 years in order to be awarded the digital Advanced Certificate in Data Protection Principles issued by Singapore Management University.

Dr Kevin Shepherdson
CEO & Founder,
Straits Interactive
Kevin provides and drives the vision, strategy and innovation of the company’s Data Privacy, GRC (Governance, Risk Management & Compliance), Data Governance and Gen AI offerings that build upon the foundation of enabling trusted businesses and responsible marketing. He has also attained his Doctorate of Business Administration (DBA) specialising in Generative AI from Golden Gate University. Previously, Kevin had a successful career riding on market and tech trends with leading MNCs in multimedia (Creative), Internet/Java (Sun) and Database/Cloud technology (Oracle). He is also the author of the books “99 Privacy Breaches to Beware of”, “The AI Factory” and “AI Ethical Breaches to Be Aware Of”. In 2021, Kevin was awarded the SkillsFuture Fellowship in recognition of his commitment to lifelong learning and skills mastery.

Dr Celine Chew
Head of Learning & Development,
Straits Interactive
As a Certified Information Privacy Manager (CIPM), Celine provides insights into the behavioural change and learning required for teams to embrace change initiatives. She offers comprehensive training for Data Protection Officers (DPOs) and companies, propelling digital transformation in data protection and governance. She has attained her DBA I Generative AI and also has extensive training experience internationally and specialises in the social, emotional and cognitive aspects of learning. She is also an executive coach to senior executives in multinational and regional companies.

William Hioe
Straits Interactive
William Hioe, who is a Certified Information Privacy Manager (CIPM), brings with him more than three decades of ICT experience in the government and public sector, first as an assistant director in Systems & Computer Organisation, MINDEF, and then as a senior director of strategic planning at the National Computer Board (NCB) / Infocomm Development Authority of Singapore (IDA). Currently, he is the managing director of Cynergie Consulting Pte Ltd, a company founded by him to offer consultancy and training services in strategic ICT planning, strategy development, policy formulation and enterprise architecting.

Chen Hwee Ling
Straits Interactive
Hwee Ling is a Certified Information Privacy Manager, Certified Information Privacy Technologist and Certified Information Privacy Principles (Asia). As an educator and engineer of information systems for more than thirty years, Hwee Ling has extensive experience working in areas such as Information Technology Service Management, Software Development, Data Analytics, Machine Learning and Robotic Process Automation. With upward trend of automation and digitalization of business operations, Hwee Ling brings insights to help organisation understand and mitigate data protection as well as information security risks.

Nicholas Cheong
Straits Interactive
Nick is a Certified Information Privacy Manager (CIPM) and a Certified Information Privacy Professional (CIPP) for Europe and Asia, certified by the International Association of Privacy Professionals (IAPP). He has also been certified by the Open Compliance and Ethics Group (“OCEG”) as a Governance, Risk and Compliance Professional (GRCP) and GRC Auditor (GRCA).
Nick has benefited from 25 years of legal practice, managing risks as a diving instructor and as a drug supervision officer. He is from the first batch of PDPC approved trainers when PDPC first launched its data protection course. He has provided data protection training and consultancy since 2014.
Fees & Funding
COMPANY-SPONSORED
PARTICIPANT PROFILE
SELF-SPONSORED
SME
NON-SME
Singapore Citizen < 40 years old
Permanent Resident
LTVP+
$654
After SWDA Funding 70%
$654
After SWDA Funding 70%
Singapore Citizen ≥ 40 years old
International Participant
$2,180
(No Funding)
$2,180
(No Funding)
$2,180
(No Funding)
Please note that prices listed above are inclusive of the new 9% GST, applicable from January 1, 2024.
SkillsFuture Level-Up Programme for Mid-Career Individuals
A SkillsFuture Credit (Mid-Career) top-up of $4,000 will be provided to Singaporeans aged 40 years and above to further offset out-of-pocket course fees for this programme.
Post Secondary Education Account (PSEA)
PSEA can be utilised for subsidised programmes eligible for SkillsFuture Credit support.
Click here to find out more.
SELF SPONSORED
# SkillsFuture Credit
Singapore Citizens aged 25 and above may use their SkillsFuture Credits to pay for the course fees. The credits may be used on top of existing course fee funding.
This is only applicable to self-sponsored participants. Application to utilise SkillsFuture Credits can be submitted when making payment for the course via the SMU Academy TMS Portal, and can only be made within 60 days of course start date.
Please click here for more information on the SkillsFuture Credit. For help in submitting an SFC claim, you may wish to refer to our step-by-step guide on claiming SkillsFuture Credits (Individual).
# Workfare Skills Support Scheme
Workfare Skills Support (WSS) Scheme in replacement of Workfare Training Support (WTS) Scheme:
From 1 July 2023, the Workfare Skills Support (WSS) scheme has been enhanced. Please click here for more details.
COMPANY SPONSORED
# Enhanced Training Support Scheme
• Organisation must be registered or incorporated in Singapore
• Employment size of not more than 200 or with annual sales turnover of not more than SGD100 million
• Trainees must be hired in accordance with the Employment Act and fully sponsored by their employers for the course
• Trainees must be Singapore Citizens or Singapore Permanent Residents
• Trainers must not be a full-time national serviceman
• Trainees will be able to enjoy ETSS funding only if the company’s SME’s status has been approved. To verify your SME’s status, please click here.
# Absentee Payroll
Companies who sponsor their employees for the course may apply for Absentee Payroll here.
For more information, please refer to:
• AP Guide (Non-SME Companies)
• Declaration Guide (SME Companies)
# SkillsFuture Enterprise Credit (SFEC)
This course is eligible for SFEC funding. Companies should check their SFEC eligibility on the Business Grant Portal.
Testimonials

Data Protection Framework and Standards. ISO 29100, Nymity Accountability and APEC Privacy Framework
$ SGD 2180
This course includes:

