DATA PROTECTION FOR INDIVIDUALS AND BUSINESSES

In today’s businesses, personal data are collected and shared and with this growing trend, there is growing concerns from individuals and businesses as to how their personal data is being used and managed.

To strengthen and entrench Singapore’s competitiveness and position as a trusted, world-class hub for businesses, and to address the growing concerns to protect data confidentiality, the Singapore’s Government has introduced Personal Data Protection Act (PDPA) in 2012, to govern and manage the collection, use and disclosure of personal data.

The PDPA establishes a data protection law that regulates the flow of personal data collection, use, disclosure and care of personal data to protect the rights of individuals and businesses having their personal data, including rights of access and correction, and the needs of organisations to collect, use or disclose personal data for legitimate and reasonable purposes.

The PDPA establishes a national Do Not Call (DNC) Registry. The DNC Registry allows individuals to register their Singapore telephone numbers to opt out of receiving marketing phone calls, mobile text messages such as SMS or MMS, and faxes from organisations.

Organisations will have to comply with the PDPA as well as the common law and other relevant laws that are applied to the specific industry that they belong to, when handling personal data in their possession.