Cybersecurity Act 2018: Primary legislation governing cybersecurity in Singapore, particularly for Critical Information Infrastructure (CII). Establishes licensing framework for cybersecurity service providers and incident reporting requirements.
Personal Data Protection Act (PDPA) 2012: Establishes framework for personal data protection in Singapore, including requirements for data security, breach notification, and cross-border data transfers.
Cybersecurity and Information Security Agency Act 2021: Incorporates the former Computer Misuse Act, providing framework for addressing computer crimes and unauthorized access to computer systems.
Electronic Transactions Act: Provides legal foundation for electronic transactions and digital signatures in Singapore.
MAS Technology Risk Management Guidelines: Specific requirements for financial institutions regarding technology risk management and cybersecurity controls.
Healthcare Services Act: Contains specific cybersecurity requirements for healthcare service providers and protection of medical data.
GDPR Compliance: Consideration required if dealing with EU data subjects, including data protection and cross-border transfer requirements.
APEC Cross-Border Privacy Rules: Framework for protecting privacy of consumer data in cross-border data transfers within APEC region.
ISO/IEC 27001: International standard for information security management systems, often referenced in Singapore cybersecurity requirements.
CSA Guidelines: Guidelines issued by Cyber Security Agency of Singapore for cybersecurity practices and incident management.
PDPC Guidelines: Guidelines from Personal Data Protection Commission on data protection and security requirements.
