Singapore Government
Link to Homepage
Home | About Us | Browse | Advanced Search | Results | My Preferences | FAQ | Help | PLUS
 
Contents  

Long Title

Enacting Formula

Part I PRELIMINARY

Part II PERSONAL DATA PROTECTION COMMISSION AND ADMINISTRATION

Part III GENERAL RULES WITH RESPECT TO PROTECTION OF PERSONAL DATA

Part IV COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

Division 1 — Consent

Division 2 — Purpose

Part V ACCESS TO AND CORRECTION OF PERSONAL DATA

Part VI CARE OF PERSONAL DATA

Part VII ENFORCEMENT OF PARTSĀ III TO VI

Part VIII APPEALS TO DATA PROTECTION APPEAL COMMITTEE, HIGH COURT AND COURT OF APPEAL

Part IX DO NOT CALL REGISTRY

Division 1 — Preliminary

Division 2 — Administration

Division 3 — Specified message to Singapore telephone number

Part X GENERAL

FIRST SCHEDULE Repealed

SECOND SCHEDULE Collection of personal data without consent

THIRD SCHEDULE Use of personal data without consent

FOURTH SCHEDULE Disclosure of personal data without consent

FIFTH SCHEDULE Exceptions from access requirement

SIXTH SCHEDULE Exceptions from correction requirement

SEVENTH SCHEDULE Constitution and proceedings of Data Protection Appeal Panel and Data Protection Appeal Committees

EIGHTH SCHEDULE Exclusion from meaning of "specified message"

NINTH SCHEDULE Powers of investigation of Commission and Inspectors

 
Slider
Left Corner
Print   Link to Viewed VersionLink to In-Force Version
 
On 22/11/2017, you requested the version in force on 14/09/2017 incorporating all amendments published on or before 14/09/2017. The closest version currently available is that of 02/10/2016.
Slider
PART III
GENERAL RULES WITH RESPECT TO
PROTECTION OF PERSONAL DATA
Compliance with Act
11.
—(1)  In meeting its responsibilities under this Act, an organisation shall consider what a reasonable person would consider appropriate in the circumstances.
(2)  An organisation is responsible for personal data in its possession or under its control.
(3)  An organisation shall designate one or more individuals to be responsible for ensuring that the organisation complies with this Act.
(4)  An individual designated under subsection (3) may delegate to another individual the responsibility conferred by that designation.
(5)  An organisation shall make available to the public the business contact information of at least one of the individuals designated under subsection (3) or delegated under subsection (4).
(6)  The designation of an individual by an organisation under subsection (3) shall not relieve the organisation of any of its obligations under this Act.
Policies and practices
12.  An organisation shall —
(a)
develop and implement policies and practices that are necessary for the organisation to meet the obligations of the organisation under this Act;
(b)
develop a process to receive and respond to complaints that may arise with respect to the application of this Act;
(c)
communicate to its staff information about the organisation’s policies and practices referred to in paragraph (a); and
(d)
make information available on request about —
(i)
the policies and practices referred to in paragraph (a); and
(ii)
the complaint process referred to in paragraph (b).