1. Introduction – CPD courses
Example: CPD courses
1.1 The Personal Data Protection Act 2012 (the “PDPA”) establishes a general data protection law in Singapore which governs the collection, use and disclosure of individuals’ personal data by organisations. The Personal Data Protection Commission (the “Commission”) is established under the PDPA with the key functions, amongst others, of promoting awareness of data protection in Singapore and administering and enforcing the PDPA. CPD courses
1.2 These Guidelines should be read in conjunction with the document titled “Introduction to the Guidelines” and are subject to the disclaimers set out therein. CPD courses.
1.3 It should be noted that the examples in these Guidelines serve to illustrate particular aspects of the PDPA, and are not meant to exhaustively address every obligation in the PDPA that would apply in that scenario. CPD courses.
2 Overview of the PDPA – CPD courses
2.1 The PDPA governs the collection, use and disclosure of individuals’ personal data by organisations in a manner that recognises both the right of individuals to protect their personal data and the need of organisations to collect, use and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances. The PDPA contains 2 main sets of provisions, covering data protection and the Do Not Call registry, which organisations are required to comply with. CPD courses.
2.2 The PDPA’s data protection obligations are set out in Parts III to VI of the PDPA (the “Data Protection Provisions”). In brief, the Data Protection Provisions deal with the following matters:
a) Having reasonable purposes, notifying purposes and obtaining consent for the collection, use or disclosure of personal data;
b) Allowing individuals to access and correct their personal data;
c) Taking care of personal data, which relates to ensuring accuracy, protecting personal data (including protection in the case of international transfers) and not retaining personal data if no longer needed; and
d) Having policies and practices to comply with the PDPA.
2.3 The PDPA provides a number of exceptions to various Data Protection Provisions to address situations where organisations may have a legitimate need, for example, to collect, use or disclose personal data without consent or to refuse to provide an individual with access to his personal data.
Source: PDPC
Click here to go to CPD courses