Personal Data Protection Act

E411357

The Personal Data Protection Act is Singapore’s primary data protection law that governs the collection, use, and disclosure of individuals’ personal data by organizations.

All labels observed (2)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf Singapore statute
data protection law
administeredBy Personal Data Protection Commission
allows withdrawal of consent by individuals
amendedIn 2020
appliesTo organizations in Singapore
organizations outside Singapore that collect, use or disclose personal data in Singapore
cameIntoForce 2014
contains Data Protection Provisions
Do Not Call Provisions
provisions on Do Not Call Registry
provisions on access to personal data
provisions on accountability
provisions on accuracy of personal data
provisions on consent
provisions on correction of personal data
provisions on data breach notification
provisions on data portability
provisions on notification
provisions on protection of personal data
provisions on purpose limitation
provisions on retention limitation
country Singapore
enforcedBy Personal Data Protection Commission
excludes public agencies
fullName Personal Data Protection Act self-linksurface differs
surface form: Personal Data Protection Act 2012
governs collection of personal data
disclosure of personal data
use of personal data
grantsRight right of access to personal data
right to correct personal data
jurisdiction Singapore
legalSystem common law
providesFor directions by the Personal Data Protection Commission
financial penalties for non-compliance
private action for loss or damage suffered from contravention
purpose to enable organizations to use personal data for legitimate and reasonable purposes
to govern the collection, use and disclosure of personal data by organizations
to safeguard individuals’ personal data
regulator Personal Data Protection Commission
regulatorAbbreviation PDPC
requires appointment of a data protection officer
ceasing retention of personal data when no longer necessary
notification of purposes for collection, use or disclosure of personal data
obtaining consent for collection, use or disclosure of personal data
policies and practices to meet obligations under the Act
reasonable security arrangements to protect personal data
shortName PDPA
yearEnacted 2012

How these facts were elicited

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.

Singapore law hasDataProtectionStatute Personal Data Protection Act
Personal Data Protection Act fullName Personal Data Protection Act self-linksurface differs
this entity surface form: Personal Data Protection Act 2012