Personal Data Protection Act (PDPA) 2012: Primary legislation governing the collection, use, disclosure, and care of personal data. Essential for data protection clauses in PaaS agreements.
Computer Misuse Act: Addresses cybersecurity offenses and unauthorized access to computer systems. Relevant for security obligations and breach notifications.
Electronic Transactions Act: Provides legal framework for electronic transactions and digital signatures. Important for contract formation and execution.
Cybersecurity Act 2018: Establishes framework for protection of Critical Information Infrastructure (CII) and cybersecurity obligations.
Copyright Act: Protects intellectual property rights in software and digital content. Crucial for IP clauses in PaaS agreements.
Evidence Act: Governs admissibility of electronic records and digital evidence. Relevant for dispute resolution and compliance.
Cloud Security Singapore Standard (SS 584): National standard for cloud security. Provides guidelines for cloud service providers and users.
Multi-Tier Cloud Security Standard: Singapore's cloud security standard with different tiers of certification. Important for compliance and security requirements.
MAS Guidelines on Outsourcing: Regulatory guidelines for financial institutions using cloud services. Applicable if serving financial sector clients.
ASEAN Framework on Personal Data Protection: Regional framework for data protection. Relevant for cross-border data transfers within ASEAN.
Cross Border Privacy Rules System: International data privacy certification system. Important for international data transfers and compliance.
Service Level Agreements: Contractual commitments regarding service availability, performance, and quality metrics.
Security Standards Requirements: Technical and organizational security measures required for PaaS providers in Singapore.
Liability and Indemnification: Legal obligations and protections regarding service failures, data breaches, and other incidents.
Exit Management: Requirements for service termination, data migration, and transition assistance.
