¶¶Òõ¶ÌÊÓƵ

1. International Data Transfers: Required if employee data is transferred outside Malaysia

2. Automated Decision Making: Required if the organization uses automated processing to make decisions about employees

3. Special Categories of Data: Required if processing sensitive personal data like health information or biometric data

4. CCTV and Monitoring: Required if workplace surveillance or monitoring systems are in place

5. Remote Working Privacy: Required if employees work remotely and special privacy considerations apply

6. Social Media Policy Integration: Required if social media usage is monitored or social media data is collected

1. Schedule 1: Detailed Data Categories: Comprehensive list of all types of personal data collected, categorized by department or purpose

2. Schedule 2: Third Party Processors: List of approved third-party data processors and their purposes

3. Schedule 3: Data Retention Schedule: Detailed retention periods for different types of personal data

4. Schedule 4: Security Procedures: Detailed information about specific security measures and procedures

5. Schedule 5: Subject Access Request Procedure: Step-by-step procedure for handling data access requests

6. Appendix A: Privacy Forms: Standard forms for consent, data access requests, and correction requests