Personal Data Protection Act (PDPA) 2012: Singapore's primary data protection legislation that governs the collection, use, disclosure, and care of personal data. Essential for third-party risk assessment when vendors handle personal data.
Cybersecurity Act 2018: Provides a framework for the protection of critical information infrastructure (CII) and the regulation of cybersecurity service providers in Singapore.
Banking Act: Regulatory framework for banking institutions in Singapore, including requirements for risk management and third-party service providers in the banking sector.
MAS Technology Risk Management Guidelines: Detailed guidelines from the Monetary Authority of Singapore on managing technology risks, including third-party and vendor risk management for financial institutions.
MAS Outsourcing Guidelines: Specific guidelines for financial institutions on managing outsourcing arrangements and associated risks with third-party service providers.
Computer Misuse Act: Legislation dealing with computer crimes and unauthorized access, relevant for security requirements in third-party arrangements.
MAS Notice 644: Specific notice on Technology Risk Management that sets out requirements for financial institutions to maintain high standards of technology risk management.
Contract Law (Cap. 43): Singapore's contract law framework that governs the formation and enforcement of contractual relationships with third parties.
Electronic Transactions Act: Provides the legal foundation for electronic transactions and digital signatures, relevant for digital agreements with third parties.
Competition Act: Legislation promoting competition and preventing anti-competitive practices, relevant for vendor selection and management.
ISO 27001: International standard for information security management systems, providing framework for managing information security risks including third-party risks.
ISO 31000: International standard providing principles and guidelines for risk management, applicable to third-party risk assessment.
GDPR Compliance Requirements: European Union's data protection regulation that may apply when dealing with EU data subjects or EU-based third parties.
APEC Cross-Border Privacy Rules: Regional privacy framework for data protection and cross-border data transfers in the Asia-Pacific region.
Healthcare Services Act: Specific regulations for healthcare service providers, including requirements for third-party arrangements in the healthcare sector.
