Success Story for Privacy Compliance and Data Protection for Global E-commerce Customer

Singapore where it is headquartered, it has data protection regulation and Anchanto needs to assess obligation towards privacy compliance and implement tools and technologies to implement requirements. Anchanto is operational in various other countries such as Malaysia, Indonesia and entering the European market where stricter privacy regulations are in place.

Transfer personal data to another country only according to the requirements prescribed under the regulations, to ensure that the standard of protection is comparable to the protection under the PDPA, unless exempted by the PDPC.

With many customers data retention guidelines are clearly defined in contracts and Anchanto needs to comply with customer data, third party data requirements to take actions like deletion, anonymization. In considering whether an organization has ceased to retain personal data the PDPC will consider the following factors in relation to the personal data.

• Whether the organization has any intention to use or access the personal data.
• How much effort and resources the organization would need to expend in order to use or access the personal data again.
• Whether any third parties have been given access to that personal data.
• Whether the organization has made a reasonable attempt to destroy, dispose of, or delete the personal data in a permanent and complete manner (Assured Deletion).