Data breach notification :- If the businesses suffer data breach, businesses ought to evaluate data inventory on impacted systems to know which customers are impacted and have legal obligation to notify.

Compliance with privacy laws :- Singapore where it is headquartered, it has data protection regulation and Anchanto needs to assess obligation towards privacy compliance and implement tools and technologies to implement requirements. Anchanto is operational in various other countries such as Malaysia, Indonesia and entering the European market where stricter privacy regulations are in place.

Data transfers (Cross geographic compliance requirements) :- Transfer personal data to another country only according to the requirements prescribed under the regulations, to ensure that the standard of protection is comparable to the protection under the PDPA, unless exempted by the PDPC.

Data retention (Contractual compliance) :- With many customers data retention guidelines are clearly defined in contracts and Anchanto needs to comply with customer data, third party data requirements to take actions like deletion, anonymization. In considering whether an organization has ceased to retain personal data the PDPC will consider the following factors in relation to the personal data.

Data Discovery (Personally Identifiable Information / Sensitive Personal Information / Access & Correction Obligation) :- Know all customer data they manage on the platform (data inventory) to enable them to protect it.

Third Party Data Sharing :- Understand data flows across applications and external systems.

Data Protection Impact Assessment :- Perform detailed data assessment and create usable data inventory and assess impact of regulatory requirements.

Data Retention / Data Deletion :- Business should retain the personal data for only as long as is necessary for business or legal purposes.

Data Subject Rights Fulfillment :- Handing Data Subject Requests (referred to as “DSR’s” - correction, updation, deletion, etc.).