Implementing new processes and policies is the top challenge.

The PDPA contains the principles for compliance, but as of yet there has been limited guidance on how to comply. The biggest challenge on the journey to PDPA compliance, as reflected by almost half (46%) of the surveyed companies, is incorporating the needed new policies and procedures into their usual business processes, such as embedding consent in their marketing processes or using data only according to purposes in the privacy notices.

Interpreting the PDPA requirements is the second area in which respondents have faced challenges.

We found responses to other challenges to be fairly evenly distributed, suggesting that each company faces its own difficulties on the way to PDPA compliance.