Question: Explain the data protection obligations of data controllers under PDPA.

Answer: Data controllers are responsible for ensuring that personal data is processed fairly, lawfully, and securely. They must also obtain consent and inform individuals about the purpose of data processing.

Example:

Before collecting customer data for marketing, a company must clearly state the intended use and obtain consent.