Personal Data Protection Act 2012 (PDPA): Main legislative framework governing the collection, use, and disclosure of personal data in Singapore, including requirements for consent, purpose limitation, notification, access, and correction
PDPA Data Protection Regulations: Subsidiary legislation under PDPA providing specific requirements for data protection compliance
PDPA Do Not Call Registry Regulations: Regulations governing the operation and compliance requirements of the Do Not Call Registry
PDPA Enforcement Regulations: Regulations detailing enforcement procedures and penalties for non-compliance with PDPA
Advisory Guidelines on Key Concepts in the PDPA: Official guidelines providing interpretation and practical guidance on key concepts within the PDPA
Advisory Guidelines on the PDPA for Selected Topics: Specific guidelines addressing particular scenarios and applications of the PDPA
Guidelines on Notice and Consent under the PDPA: Detailed guidance on how to properly obtain and maintain consent, and provide notice to individuals
Consent Obligation: PDPA obligation requiring organizations to obtain valid consent before collecting, using, or disclosing personal data
Purpose Limitation Obligation: PDPA obligation requiring organizations to collect, use or disclose personal data only for purposes that a reasonable person would consider appropriate
Notification Obligation: PDPA obligation requiring organizations to inform individuals of the purpose for collecting, using, or disclosing their personal data
Access and Correction Obligation: PDPA obligation requiring organizations to provide individuals with access to their personal data and allow for correction
Accuracy Obligation: PDPA obligation requiring organizations to make reasonable effort to ensure personal data collected is accurate and complete
Protection Obligation: PDPA obligation requiring organizations to implement reasonable security arrangements to protect personal data
Retention Limitation Obligation: PDPA obligation requiring organizations to cease retention of personal data when no longer necessary for legal or business purposes
Transfer Limitation Obligation: PDPA obligation requiring organizations to ensure adequate protection when transferring personal data outside of Singapore
Openness Obligation: PDPA obligation requiring organizations to implement and make available information about their data protection policies and practices
APEC Cross-Border Privacy Rules (CBPR) System: International data transfer framework that Singapore participates in, providing standards for cross-border data flows
Binding Corporate Rules (BCRs): Internal rules for data transfers within multinational companies that ensure adequate data protection standards
Healthcare Sector Guidelines: Sector-specific guidelines for handling personal data in the healthcare industry under PDPA
Education Sector Guidelines: Sector-specific guidelines for handling personal data in educational institutions under PDPA
Social Service Sector Guidelines: Sector-specific guidelines for handling personal data in social service organizations under PDPA
Real Estate Agency Sector Guidelines: Sector-specific guidelines for handling personal data in real estate agencies under PDPA
