This legal document outlines the company's policy on protecting personal data. It emphasizes the significance of safeguarding personal data in accordance with various data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) in Europe, the California Consumer Privacy Act (CCPA) in the United States, and the Personal Data Protection Act (PDPA) in Singapore.
The document serves as a framework for collecting, processing, storing, and managing personal data responsibly and in compliance with these laws. It holds all employees responsible for ensuring proper handling of personal data in their day-to-day activities, mandates adherence to this policy, and requires reporting any data protection concerns to the Data Protection Officer (DPO).
Additionally, it defines the responsibilities of contractors and third parties who must comply with applicable data protection laws and regulations and report any concerns to the DPO. The policy also details the rights of data subjects to access, rectify, erase, restrict, transfer, object, or withdraw consent to the processing of their personal data and provides information on how they can do so by contacting the Data Protection Officer.