PDPA 2012: Singapore's primary data protection legislation that governs the collection, use, disclosure and care of personal data. Sets fundamental requirements for obtaining valid consent.
PDPA Advisory Guidelines on Key Concepts: Official guidelines providing detailed interpretation of PDPA's key concepts and requirements for compliance.
PDPA Advisory Guidelines on Consent Obligation: Specific guidelines detailing requirements for obtaining valid consent, including that it must be voluntary, informed, and clear.
PDPA Advisory Guidelines on Notification Obligation: Guidelines specifying requirements for notifying individuals about the purpose of collecting, using or disclosing their personal data.
Banking Act: Sector-specific regulation governing personal data handling in financial institutions, if applicable to the context.
Healthcare Services Act: Sector-specific regulation governing personal data handling in healthcare providers, if applicable to the context.
Education Act: Sector-specific regulation governing personal data handling in educational institutions, if applicable to the context.
Consent Requirements: Core requirements stating that consent must be voluntary, informed, clear and unambiguous, with proper documentation of the purpose of data collection.
Cross-border Transfer Requirements: Specific requirements under PDPA for transferring personal data outside of Singapore, ensuring comparable protection standards.
Data Retention Requirements: Guidelines on how long personal data should be retained and requirements for secure disposal when no longer needed.
Access and Correction Rights: Individual rights under PDPA to access their personal data and request corrections to ensure accuracy.
