Certified Information Privacy Manager (CIPM)

Data Protection Officer (DPO) is an emerging job role. Almost all the data protection laws in the world require organisations to appoint a DPO by law. There is a shortage of data protection officers worldwide, including Singapore. DPO is ideal for mid-career PMET in the digital economy.

This course is designed to transform the knowledge of data protection regulations and policies into implementable and practical day-to-day operations. Participants will learn the benefits of data protection, the principles and regulations of data protection, and how to implement an effective data protection management programme with the necessary knowledge, skills, tools, and methods.

Participants will learn how to draft a data protection policy, build a data protection team, compile a data inventory map, assess data management risk, embed Privacy by Design into systems and processes, conduct Data Protection Impact Assessment (DPIA), plan for data breach response, conduct data protection audit, and measure the effectiveness of the data protection management programme.

This course will further prepare learners for the optional IAPP certification examination (not included in this course) which participants are encouraged to sit for. The IAPP privacy certifications (CIPM, CIPP, CIPT) are widely recognised by recruiters and sought-after credentials for privacy professionals such as data protection officers, risk and compliance, data protection auditors, data protection consultants, and legal professionals. 

Course Details

Course Dates:

29 to 31 July 2024
Closing date: 22 July 2024

Sign Up Now

Course Dates:

20 to 22 November 2024
Closing date: 9 November 2024

3 days, 9.00am - 5.00pm (Virtual)


Who Should Attend

This course is ideal for mid-career PMET to transit into an essential role in the digital economy. This course is most suited for DPO including regional or senior DPO, members of data protection team, compliance managers, risk managers, auditors, IT executives, cybersecurity professionals, IT consultants, and department managers.


  • GCE A-Level and above
  • Basic knowledge of data protection principles preferred but not mandatory. Basic data protection knowledge can be acquired through courses such as 'WSQ fundamentals of PDPA' or 'Practitioner Certificate in PDPA (2020)'
  • 2 years or more working experience would be preferred but not mandatory

Programme Outline

Learning Objectives

One will learn the many practical aspects of implementing a workable data protection programme in one's organisation, from how to create a company vision in data protection, how to structure a data protection team, how to develop and implement system frameworks, to how to communicate to stakeholders, and how to measure the data protection programme's effectiveness and performance, and more.

Day 1
  • Module 1: Introduction to privacy program management
  • Module 2: Privacy governance
  • Module 3: Applicable laws and regulations
  • Module 4: Data assessments
Day 2
  • Module 5: Policies
  • Module 6: Data subject rights
  • Module 7: Training and awareness
  • Module 8: Protecting personal information
Day 3
  • Module 9: Data breach incident plans
  • Module 10: Monitoring and auditing program performance
  • Online Quiz (MCQ and open-ended questions)

    Note: Participants can sit for an optional IAPP examination to obtain the CIPM certification. IAPP certifications (CIPM, CIPP, CIPT) are the most sought-after credentials in data protection and privacy job roles.

Course Fees and Funding

Full course fee inclusive of prevailing GST

You pay

SkillsFuture Course Fee subsidy (70%)

  • For Singapore Citizens < 40 years old 
  • For Permanent Residents

You pay

Mid-Career Enhanced Subsidy (90%)

  • For Singapore Citizens ≥ 40 years old

You pay

Enhanced Training Support for SMEs (90%)

  • For SME - Sponsored employees

You pay

The above module fee payable is inclusive of prevailing 9% GST.

The course fee does not include the IAPP examination fees. Participants who have successfully completed the class are eligible to purchase a discounted exam voucher from our training partner, Young Technology Consulting Pte Ltd.


Wong Kar Hong
Founder and Chief Consulting Officer, Young Technology Consulting Pte Ltd

Kar Hong is the Founder and CEO of Young Technology Consulting Pte Ltd which specialises in data privacy and protection. As an official training partner of International Association of Privacy Professionals (IAPP), his company has trained many Data Protection Officers (DPOs) in IAPP certification courses such as CIPM, CIPP and CIPT (Certified Information Manager / Professional / Technologist). Besides the IAPP certification courses, Kar Hong has developed and taught advanced data protection courses in Privacy Engineering and hands-on DPO workshop for Thailand and China, respectively.
Being a strong advocate for mid-career transition to the emerging job roles in data protection, Kar Hong has given many public, pro-bono talks, in both Chinese and English, on data protection and career transition to data protection for organisations such as the National Library, SME Centre @SCCCI, NUS, and SkillsFuture Singapore.
Kar Hong studied at the University of Pennsylvania, under a scholarship from National Computer Board of Singapore. He graduated with summa cum laude with dual degrees in Computer Science and Engineering, Mathematics and Economics. He also has a MSc in Bioinformatics from NTU and a MSc in Management of Technology from NUS. As an IAPP Fellow of Information Privacy (FIP), he is certified in IAPP CIPM, CIPP/E and CIPT.

Policies and Financing Options

SSG Funding Terms and Conditions

Use of Personal Details

In consideration of the subsidy provided by SkillsFuture Singapore Agency (“SSG”) through the SUTD Academy for the Course,

I consent to:

The collection, use and disclosure to relevant third parties of my personal data by the SUTD Academy including but not limited to personal particulars, attendance records, assessment/performance records, for the following purposes:

  1. Reporting of national statistics and conducting of holistic continuing education training research and analysis;

  2. Facilitate the conduct of the relevant surveys and audits in relation to the Course;

  3. General administration of the Course including but not limited to processing of the subsidy provided by SSG;

  4. Publicity and marketing of the Course or other Courses to be provided by SSG or SUTD Academy; and

  5. SSG or its Appointed Auditors or Nominated Representatives to directly contact Course Participant to obtain information deemed necessary for the purposes of conducting effectiveness survey or audits in relation to the Course.

I agree to:

  1. Attend and complete all lectures, class exercises, workshops and assessments;

  2. Complete the Course feedback at the end of the Course;

  3. Complete the post Course survey sent about 3 to 6 months after class attendance; and

  4. Sign up for a personal email account.

SUTD Privacy Statement

For more information on SUTD's privacy statement, please visit https://sutd.edu.sg/Privacy-Statement.

SUTD Terms and Conditions

Methods of Payment

Learn more about the available payment modes.

Cancellation & Refund Policy

  1. If a written notification is sent to sutd_academy@sutd.edu.sg within 24 hours after course registration deadline there will be no cancellation charges. A full refund will be made. 

  2. No refund is provided if written notification is more than 24 hours after course registration deadline. SUTD Academy reserves the rights to collect the full fee amount from the participant.

Replacement Policy

Companies may replace participants who have signed up for the course by giving a 3-working day notice before the course commencement date to sutd_academy@sutd.edu.sg. Terms and conditions apply.

Registration Policy

  1. Course may be cancelled due to insufficient participants. SUTD Academy will not be responsible or liable in any way for any claims, damages, losses, expenses, costs or liabilities whatsoever (including, without limitation, any direct or indirect damages for loss of profits, business interruption or loss of information) resulting or arising directly or indirectly from any course cancellation.

  2. Course enrolment is based on a first-come, first-served basis.

  3. SUTD Academy reserves the right to change or cancel any course or instructor due to unforeseen circumstances. 

Types of Funding

Funding under Mid-Career Enhanced Subsidy ("MCES")

  1. MCES is an enhanced Subsidy to encourage mid-career individuals to upskill and reskill, thereby helping them to remain competitive and resilient in the job market. With this, all Singaporeans aged 40 and above will receive higher subsidies of up to 90% course fee subsidy for SSG-funded certifiable courses.

  2. Individuals/employers are not required to submit an application for the MCES. Those pursuing SSG-funded programmes will be charged the appropriate subsidised fees by SUTD Academy if they are eligible MCES. Individuals/employers will only need to pay the nett fee (full course fee after SSG's grant).

    For more info, please visit SkillsFuture website at https://www.skillsfuture.gov.sg/enhancedsubsidy

Funding under Enhanced Training Support for SMEs ("ETSS")

  1. ETSS is an enhanced funding to enable SMEs to send their employees for training.

  2. SMEs will enjoy subsidies of up to 90% of the course fees when they sponsor their employees for SSG-funded certifiable courses.

  3. In addition to higher course fee funding, SMEs can also claim absentee payroll funding of 80% of basic hourly salary at a higher cap of $7.50 per hour. SMEs may apply for the absentee payroll via the SkillsConnect system.

  4. To qualify, SMEs must meet all of the following criteria:
    - Organisation must be registered or incorporated in Singapore
    - Employment size of not more than 200 or with annual sales turnover of not more than $100 million
    - Trainees must be hired in accordance with the Employment Act and fully sponsored by their employers for the course
    - Trainees must be Singapore Citizens or Singapore Permanent Residents

    For more info, please visit SSG website at https://www.ssg.gov.sg/programmes-and-initiatives/funding/enhanced-training-support-for-smes1.html

Funding under Union Training Assistance Programme ("UTAP")

UTAP is a training benefit for NTUC members to defray their cost of training. This benefit is to encourage more union members to go for skills upgrading.

NTUC members enjoy 50% unfunded course fee support for up to $250 each year when you sign up for courses supported under UTAP (Union Training Assistance Programme).

For more info, please visit https://e2i.com.sg/individuals/ntuc-education-and-training-fund/.

Funding under Post-Secondary Education Account ("PSEA")

The Post-Secondary Education Account (PSEA) is part of the Post-Secondary Education Scheme to help pay for the post-secondary education of Singaporeans.

This is part of the Government’s efforts to encourage every Singaporean to complete their post-secondary education. It also underscores the Government’s commitment to support families in investing in the future education of their children and to prepare them for the economy of the future. PSEA is not a bank account.

It is administered by the Ministry of Education (MOE) and is opened automatically for all eligible Singaporeans.

Account holders can use their PSEA funds to pay for their own or their siblings’ approved fees and charges for approved programs conducted by approved institutions.

However, you will have to check your eligibility and balance by contacting MOE first.

Contact MOE at (65) 6260 0777

E-mail to MOE at contact@moe.edu.sg

Click here for MOE website.