PDPA 2012: Singapore's primary data protection legislation that includes Data Protection Provisions and governs the collection, use, disclosure, and care of personal data
PDPA Regulations 2021: Updated regulations that provide specific requirements for data protection compliance in Singapore
Data Breach Notification Regulations 2021: Specific regulations governing mandatory data breach notification requirements and procedures
PDPC Advisory Guidelines: Guidelines issued by Personal Data Protection Commission covering key concepts and implementation of PDPA
Sector-specific Advisory Guidelines: Industry-specific guidelines issued by PDPC for different business sectors
APEC CBPR System: Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System for consistent data privacy protection
Consent Obligations: Requirements for obtaining valid consent before collecting, using, or disclosing personal data
Purpose Limitation: Obligation to collect, use or disclose personal data only for purposes that a reasonable person would consider appropriate
Notification Obligation: Requirement to inform individuals of the purpose for collecting, using, or disclosing their personal data
Access and Correction Rights: Individual rights to request access to and correction of their personal data held by organizations
Accuracy Obligation: Requirement to make reasonable effort to ensure personal data collected is accurate and complete
Protection Obligation: Requirement to implement reasonable security arrangements to protect personal data
Retention Limitation: Obligation to cease retention of personal data when no longer necessary for legal or business purposes
Transfer Limitation: Requirements governing the transfer of personal data outside of Singapore
Data Breach Requirements: Obligations for handling and reporting data breaches, including assessment and notification procedures
