Personal Data Protection and Privacy Laws describes a set of legislations or policies that are designed to protect the personal and potentially sensitive data of the customers, employees and the company.
These laws often depend on your area of operation and could benefit from external advice to ensure compliance.
Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. In the context of this article, the protection would be pertaining to sensitive company, employee, or client information and digital assets. The implementation of cybersecurity has become increasingly difficult and regulated.
Singapore’s Personal Data Protection legislation is covered by the Personal Data Protection Act (PDPA) of 2012. The PDPA recognises that companies will need to collect, process and disclose personal information for reasonable purposes but also acknowledges the right of individuals.
Another notable legislation is the Cybersecurity Act of 2018. With the rise of cyber threats, updates to the regulations can be expected, as seen in an amendment to the Act being made in May 2024 to expand the scope of the act and enhance the powers of the Commissioner.
Keeping up to date with the changing regulations is important, contact our team to assist your company with compliance.
Email: enquiry@kgplegal.com.sg
Phone: (+65) 6916-1298
Fax: (+65) 6916-1290
KGP Legal LLC is a leading corporate and commercial law firm based in Singapore, with a strong international focus. As a member of the InterAsia Law Alliance, we provide seamless legal assistance in Singapore, Hong Kong, China, and Japan. Our integration within this network enables us to leverage extensive expertise and resources, ensuring comprehensive legal support across multiple jurisdictions.
Developing a company-wide data protection policy has several benefits. Namely:
Complying with more specific data protection issues, such as cookies in data collection, data retention, digital certification services, encryption keys etc. can be difficult but still necessary. Reach out to us for assistance with these matters or complying with information requests
Singapore’s legislative framework regarding these matters are voluminous and may require professional help to understand and comply with.
Implementing cybersecurity measures is key to complying with the Cybersecurity Act and ensuring the safety of your company and your customers. Reach out to us for help with this implementation.
Our team can advise you on the best practices when it comes to data protection and privacy to ensure minimal disruption and risk to your business.
Contact us to help identify and minimise risk areas in your business.
Our law firm is committed to providing robust data protection, privacy law and cybersecurity services.
We offer strategic advice and practical guidance to manage data protection, privacy and cybersecurity matters and ensure legal compliance.
Key obligations set out in the PDPA include the obtainment of consent, purpose limitation/notification, reasonable data protection arrangements, storage limitation, the allowance of access and correction, overseas transfer limitations, accountability obligations and accuracy obligations.
The Act sets out a framework governing the protection of Critical Information Infrastructures (CII), which is “a computer system located wholly or partly in Singapore, necessary for the continuous delivery of an essential service, and the loss or compromise of the computer system will have a debilitating effect on the availability of the essential service in Singapore” (Cybersecurity Act, Section 7(1)). It also governs the licensing of cybersecurity service providers. The Act also allows for the appointment of a Commissioner of Cybersecurity, who can approve one or more codes of practice of standards of performance for the regulation of owners of CIIs.