• Walter Silvester
  • PDPA
  • January 18, 2021

Guide to PDPA Assessment Tool for Organisations (PATO) Part II

The 9 Data Protection Obligations

The Personal Data Protection Act (PDPA) was enacted in October 2012 to govern the collection, use and disclosure of personal data. Following the amendments made to the Personal Data Protection (Amendment) Act 2020, the PDPA has established nine data protection obligations that an organisation ought to act in compliance with. In an effort to assist these organisations in evaluating whether its data protection policies satisfy the obligations stated in the PDPA, the Personal Data Protection Commission (PDPC) has produced a PDPA Assessment Tool for Organisations (PATO).

Read More
  • Walter Silvester
  • PDPA
  • January 17, 2021

Guide to PDPA Assessment Tool for Organisations (PATO) Part I

The 9 Data Protection Obligations

The Personal Data Protection Act (PDPA) was enacted in October 2012 to govern the collection, use and disclosure of personal data. Following the amendments made to the Personal Data Protection (Amendment) Act 2020, the PDPA has established nine data protection obligations that an organisation ought to act in compliance with. In an effort to assist these organisations in evaluating whether its data protection policies satisfy the obligations stated in the PDPA, the Personal Data Protection Commission (PDPC) has produced a PDPA Assessment Tool for Organisations (PATO).

Read More
  • Walter Silvester
  • PDPA
  • December 7, 2020

Updates to the Personal Data Protection Act

The Personal Data Protection (Amendment) Bill 2020 was passed on 2 November 2020. As compared to when the PDPA first came into force in 2014 giving organisations a generous grace period, the updates to the PDPA have no grace period and require organisations to immediately comply upon its enactment by gazette.

Read More
  • Walter Silvester
  • PDPA
  • January 22, 2020

Personal Data Protection Act (PDPA): When is the collection of NRICs allowed?

Overview

In recent years, the Protection Data Protection Act 2012 (“PDPA”) of Singapore has been a trending topic for discussion, especially due to the trend of storing valuable personal data virtually online instead of in physical storage. The PDPA is crucial as it protects the personal data for individuals while recognising the need for organisations to “collect, use and disclose” personal data for reasonable purposes.1 To achieve that, the PDPA sets out guidelines and obligations that we will be discussing in another series of articles.

Read More
  • Walter Silvester
  • PDPA
  • January 22, 2020

Personal Data Protection Act (PDPA): 5 Other Data Protection Obligations under the PDPA, Part II

Overview

This is the last articles in this series which looked at the main data protection obligations set out by the Personal Data Protection Act (“PDPA”). 1 These obligations were termed the Main Data Protection Obligations by the Personal Data Protection Commission and the purpose of it is to allow for individuals or organisations to better understand the obligations and guidelines that they have to adhere to in order to comply with the requirements set out by the PDPA. In this article, we will discuss the last two main data protection obligations; the Transfer Limitation Obligation and the Openness Obligation.

Read More