The following represents Azarith Sofia’s experience prior to joining Low & Partners: 

PRIVACY, DATA PROTECTION & CYBERSECURITY (PDPA) 

PDPA Compliance  

  1. Advised Permodalan Nasional Berhad in respect of its comprehensive Personal Data Protection Act (PDPA) Gap and Maturity Assessment, including a full review of compliance with the Personal Data Protection Act 2010 and the Personal Data Protection (Amendment) Act 2024, and an assessment of data governance, data handling practices and legal obligations across Permodalan Nasional Berhad and its wholly owned subsidiaries, Amanah Saham Nasional Berhad and Pelaburan Hartanah Nasional Berhad. 

2. Advised Small Medium Enterprise Development Bank Malaysia Berhad in respect of its online financing application platform known as MySMEBank, including reviewing the Terms of Access governing user access and preparing Alert Notices regarding data protection risks. 

3. Advised Lactalis Trading Malaysia Sdn Bhd in respect of its role as a data processor for contest operations, including drafting the Terms and Conditions governing the data processing activities. 

4. Advised Richemont, a Switzerland-based luxury goods holding company, in respect of its information security and data protection requirements, including reviewing its Non-Disclosure Agreement and Outsourced Information Technology Support Agreement. 

5. Assisted Syarikat Air Johor in the drafting of internal Personal Data Protection Act 2010 compliance policies and procedures. 

Terms and Privacy Policies  

6. Advised Foodish Sdn Bhd in respect of its mobile application, including drafting the Terms and Conditions and Privacy Policy in compliance with the Personal Data Protection Act 2010. 

7. Advised Winapp Messenger Sdn Bhd in respect of its website and mobile application, including drafting the Terms and Conditions and Privacy Policy.