PDPA 2012: Singapore's Personal Data Protection Act - Primary legislation governing the collection, use, disclosure, and care of personal data. Key reference for access control and data protection requirements.
Cybersecurity Act 2018: Establishes framework for protection of Critical Information Infrastructure (CII) and cybersecurity obligations, including access control requirements.
Cybersecurity and Cybercrime Act 2022: Encompasses former Computer Misuse Act, providing legal framework against unauthorized access and system interference.
MAS TRM Guidelines: Monetary Authority of Singapore's Technology Risk Management Guidelines - Specific requirements for financial institutions regarding access control and review.
PDPC Advisory Guidelines: Practical guidance on interpreting PDPA requirements, including access control and data protection measures.
PDPC DPIA Guide: Guide to Data Protection Impact Assessments - Framework for assessing and mitigating risks in access control systems.
ISO/IEC 27001: International standard for Information Security Management Systems, providing framework for access control and security management.
ISO/IEC 27002: Detailed controls and implementation guidance for information security, including access control mechanisms.
Purpose Limitation Principle: Legal requirement under PDPA that personal data can only be used for purposes for which it was collected.
Protection Obligation: Legal requirement under PDPA to protect personal data by making reasonable security arrangements.
Retention Limitation: Legal requirement under PDPA regarding the duration for which personal data can be retained.
Access and Correction Rights: Individual rights under PDPA to access and correct their personal data held by organizations.
