Singapore Report: Data Protection in the Internet

Abstract

Singapore's data protection regime is an evolving one. Its Personal Data Protection Act (PDPA), which applies to both electronic and non-electronic data, recognises the need to strike a reasonable balance between the need for organisations to collect, use and disclose personal data, with individuals' right to protection of their personal data. As such, the data protection authorities are constantly reviewing the PDPA and its impact, with the results seen through new or updated advisory guidelines, and potentially even changes to the PDPA itself. Other laws, such as the Computer Misuse Act and the Criminal Procedure Code, also affect Singapore's data protection regime in significant ways.