Personal Data Protection Act 2012 (PDPA): Singapore's primary data protection legislation that governs the collection, use, disclosure and care of personal data. Includes mandatory data breach notification requirements and establishes obligations for data intermediaries and controllers.
Cybersecurity Act 2018: Legislation that establishes a framework for the protection of critical information infrastructure (CII) and provides requirements for cybersecurity incident reporting.
PDPC Guide on Managing Data Breaches 2.0: Regulatory guideline that provides detailed instructions on assessment criteria for data breaches, notification requirements and timelines, and containment and remediation measures.
PDPC Guide to Data Protection Impact Assessments: Regulatory guideline that outlines risk assessment methodology and privacy impact considerations for organizations conducting data protection impact assessments.
Banking Act: Industry-specific legislation containing banking secrecy requirements and data protection obligations for financial institutions.
Healthcare Services Act: Industry-specific legislation governing the protection and handling of healthcare-related personal data.
Telecommunications Act: Industry-specific legislation containing requirements for the protection of telecommunications data and user information.
ISO/IEC 27701:2019: International standard for Privacy Information Management that provides guidance for protecting personal data.
APEC Cross Border Privacy Rules (CBPR): Regional privacy framework that provides standards for cross-border data transfers and privacy protection in the Asia-Pacific region.
