Personal Data Protection Act (PDPA) 2012: Primary legislation governing personal data protection in Singapore, including nine data protection obligations, cross-border transfer requirements, and breach notification protocols
Computer Misuse Act: Legislation addressing cybercrime and unauthorized access to computer systems, crucial for defining security obligations and breach responses
Electronic Transactions Act: Provides legal framework for electronic transactions and contracts, ensuring enforceability of cloud service agreements
Cybersecurity Act 2018: Establishes framework for protection of Critical Information Infrastructure and cybersecurity requirements in Singapore
MTCS SS (Multi-tier Cloud Security Singapore Standard): Singapore's cloud security standard that specifies security requirements for cloud service providers
MAS Technology Risk Management Guidelines: Specific requirements for financial services sector regarding technology risk and cloud services management
IMDA Guidelines: Regulatory guidelines from Infocomm Media Development Authority covering service levels and industry standards
Cross-Border Data Transfer Requirements: Regulations governing the transfer of data outside of Singapore, including requirements for adequate protection
Data Breach Notification Requirements: mandatory reporting obligations for data breaches under PDPA and sector-specific regulations
Singapore Contract Law: Fundamental contract law principles governing formation and enforcement of cloud hosting agreements
Unfair Contract Terms Act: Legislation controlling the use of unfair terms in contracts, particularly relevant for B2C cloud services
Consumer Protection (Fair Trading) Act: Protects consumers against unfair practices and ensures fair trading in cloud service provisions
ISO/IEC 27001: International standard for information security management systems, often required for cloud service providers
GDPR Compliance Requirements: European Union data protection requirements that may apply when handling EU residents' data
Data Retention and Disposal Policies: Requirements for proper retention periods and secure disposal of data under various regulations
