- Email: [email protected]
- Phone: +65 935 15400
![What is Personal Data Protection Act (PDPA) in Singapore [Updated 2024]](https://www.craw.sg/wp-content/uploads/2023/03/craw-security-white-logo.png){kind=logo}
![What is Personal Data Protection Act (PDPA) in Singapore [Updated 2024]](https://i0.wp.com/www.craw.sg/wp-content/uploads/2023/06/What-is-Personal-data-Protection-Act-PDPA.webp?fit=800%2C400&ssl=1)
The Personal Data Protection Act is a law created by officials to secure data against online threats. Online threats have increased due to open-source platforms. Insecure online platforms are where malicious hackers do their illicit activities and trap innocent people to blackmail them for money with the wrong means.
To stop their malicious activities, officials prepared security measures that must be followed by every company that works online. The laws and regulations ensure the safety of the personal data. Now, what does the PDPA work for data security? Let’s talk about the Personal Data Protection Act 2012.
The PDPA is a legal standard whose objective is to secure the confidential information of individuals against online threats. It holds on several rules & regulations for the following operations related to data.
PDPA is synchronized in the system to get the upper hand over data safety and to protect firms against online risks.
Key Points of the PDPA include:
It applies to each firm, regardless of its identity, that collects, uses, and discloses confidential data during its tasks, such as follows.
2.Individuals’ Personal Data
It covers the safety of confidential data related to individuals with several other rules. That includes the following data.
3.Data Collection, Use, and Disclosure
It ensures the completion of tasks with security, such as – the collection, use, and exposing of confidential data by firms. Moreover, it places rules for getting permission, alerting people for data collection, and legitimate use of confidential information.
It also applies to data transfer outside Singapore. The companies must ensure proper security measures are set properly while transferring data to other nations with improper data security standards.
It offers the following rights to individuals.
6.Compliance and Penalties
Firms must cooperate with PDPA’s provisions and deploy necessary safeguards to secure confidential data; non-compliance can cause penalties, such as fines & imprisonment.
The PDPA aims to achieve the following objectives:
The first objective of PDPA is to secure the confidential information of people. It sets T&C to ensure that firms maintain data safely and responsibly, reducing the threats of unauthorized access, misuse, or disclosure.
It encourages individuals to have greater control over their confidential information. Moreover, it proposes considering safety before collecting, using, or disclosing their data. People have the right to know how their data is consumed and have the choice related to the collection and use of data.
It offers transparency by firms to notify individuals about the objectives for which their confidential data is being gathered, used, or disclosed. Firms are supposed to offer clear and easy-to-understand T&C to ensure moderation.
It motivates companies to adapt to responsible data practices. Moreover, it involves the following tasks to ensure the completion of necessary operations.
It also has the objective of supporting business and innovation. Clear T&Cs will elevate the management of personal data. Moreover, PDPA offers a framework for increasing reliability among consumers & firms.
It involves provisions for applicabilities and penalties to ensure compliance with its needs. Moreover, it has the objective of creating accountability & incentivize firms to prioritize data protection and privacy.
The Personal Data Protection Act covers various things related to the collection, use, and disclosure of confidential information by firms. PDPA covers the following areas in the IT Industry.
| S.No. | Factors | PDPA | GDPR |
| 1. | Territorial Scope | It is applied to firms working in Singapore & gathers, uses, and exposes data within the nation. | It is applied to firms outside the EU if they trade goods and services to EU residents. |
| 2. | Consent Requirements | PDPA acquires permission to use personal data. | It is free of consent and doesn’t need any specific information. Moreover, one can easily get consent. |
| 3. | Data Protection Officers (DPOs) | Well, there’s no need to present it in the PDPA in Singapore. However, they are encouraged to hire a DPO usually. | It mandates the hiring of a DPO for specific firms. |
| 4. | Penalties and Fines | These penalties are specifically lower with fines limitation at SGD 1 million/ 10% yearly revenue, depending on the nature of the fault. | It causes higher fines for not implementing as compared to the PDPA. Or, it can cause fines up to €20 million/ 4% of global annual turnover. |
| 5. | Data Transfer Requirements | Well, there is no pre-requisite for data transfer in Singapore. However, it pushes corp to ensure the proper security measures for international data transfer. | GDPR restricts international data sharing outside the EU until it’s a necessary scenario. It validates adequacy decisions, standard contractual clauses, binding corporate rules, or individual consent. |
| 6. | Data Subject Rights | PDPA gives specific rights to personal data for everyone. | It offers a set of rights such as – the right to data portability, the right to erasure (“right to be forgotten”), and the right to object to processing based on legitimate interests. |
| 7. | Reporting Data Breaches | It doesn’t voluntarily have a certain breach notification period but needs firms to test and notify affected victim’s significant breaches. | It puts it mandatory to notify sensitive data breaches to related data security officials within 72 hours until the breach is unlikely to result in risks ti individuals’ rights and freedoms. |
It refers to data related to individuals directly/ indirectly. Such data can be used to recognize a specific person. Moreover, it comes in various formats, such as follows.
Some examples of personal data under the Personal Data Protection Act (PDPA) are
Craw Cyber Security is a leading cyber security training and consulting firm based in Singapore. They offer a wide range of courses and services to help individuals and organizations protect themselves against cyber threats.
Copyright @ 2023 Craw Cyber Security. All Rights Reserved.
Privacy Policy
Refund and Return Policy
Disclaimer