DATA PRIVACY AND SECURITY

Digi prioritises data protection and security to ensure employees’ and customers’ personal data are safe and secure. Our data privacy strategy incorporates strong governance around strengthening of privacy controls and in driving a responsible business culture, supported by continuous awareness on safe privacy practices and information management. Initiatives implemented this year centers around the following :

Boosting customer experience with wider online presence and increased security confidence with enhanced security infrastructure
Ensure effective governance for Digi’s internal processes to safeguard data privacy and protection within the business operations

Governance

Digi has a clear privacy and information security position - Transparent about how personal data is collected and used, committed to using personal data to provide better and more relevant services, and thorough in keeping personal data safe. Digi constantly reviews its routines and processes for privacy and security, authority requests and information management. These functions are monitored under the purview of Digi’s Data Privacy Officer (DPO), and Heads of Security and Legal.

Key Initiatives

Reinforced Privacy Foundations with Telenor Asia Privacy Programme

Revised Privacy Vendor Questionnaire to improve due diligence process
Enhanced Data Protection Impact Assessments (DPIA), with clearer privacy risk assessment and improved turn around rates

Strengthening Governance Through Our Policies and Manuals

Updated Privacy Notice for Customers and Employees, as well as introduced a Visitor Notice at all Digi offices
Revised governing documents for Privacy, Information Management, and Authority Request, as well as introduced a Personal Data Breach Handling Manual

Driving Privacy as a Responsible Business Culture

Provided training to all new employees and retail staff on the importance of privacy, information management, and data protection
Conducted training on topics such as internal privacy processes, vendor management, and data breach handling
Produced bite-size materials to raise awareness on privacy and information management

Engaged Regulators on Best Practices for Data Protection

Participated in Jabatan Perlindungan Data Peribad (JPDP) Public Consultation Paper on PDPA Reforms
Adhered to Personal Data Protection (PDP) Commissioner's Advisory on handling of personal data for contact tracing purposes

Improved Awareness and Importance of Cybersecurity to SMEs and Digizens

Cloud-based security protection solution for SME customers - Partnered with Cisco Malaysia to offer the industry’s first cloud-based cybersecurity solution for businesses to harness their network security
Mandatory cybersecurity awareness training sessions for employees

Performance

Simplified internal privacy assessment processes across the supply chain
100% employees completed privacy e-learning modules and trained over 300 employees on privacy and information management topics
100% employees completed scenario-based learning on Phishing, Information handling, Mobile Security and Everyday Security
Embarked on thought leadership regarding privacy for children, and best practices on privacy and data protection
Participated in Telenor Group's Annual Authority Request Disclosure Report. Please find the latest report here.

Visit our Privacy and Data Protection website for more information on how we comply to strictest standards, internal governance processes and enforce security measures in managing our customer data.

DATA PRIVACY AND SECURITY

Governance

Key Initiatives

Performance

GROWTH

EFFICIENCY AND SIMPLICATION

WINNING TEAM

RESPONSIBLE BUSINESS