|
|
|
Data is a key enabler of digital transformation, but a balance must be achieved between data protection and business innovation.
|
|
|
Yeong Zee Kin,
Deputy Commissioner, PDPC
|
|
|
Gearing up for Sept 1 when NRIC guidelines kick in
As the effective date of the NRIC guidelines draws close, we spoke to several organisations from two sectors that are widely known to collect NRIC numbers as part of their business processes, on the changes they had undertaken to prepare for the day.
Read More
|
|
Personal Data Protection Seminar 2019
Themed “Empowering A Data Driven Economy”, PDPC’s flagship event will be held at the Sands Expo & Convention Centre on 17 & 18 July.
Participants can expect two days of engaging activities, supported by a distinguished line-up of local and international speakers and facilitators.
Read More
|
|
First Comprehensive Trusted Data Sharing Framework
IMDA and PDPC released its first comprehensive Trusted Data Sharing Framework to facilitate trusted data sharing between organisations.
The framework helps organisations establish a set of baseline practices by providing a common ‘data-sharing language’, and suggesting a systematic approach to the broad considerations for establishing trust between data sharing partners.
Read More
|
|
|
Announcements
|
|
|
 |
Hong Kong’s and Singapore’s data protection authorities furthered relations by signing a Memorandum of Understanding (MOU) to strengthen cooperation in personal data protection in the two jurisdictions, at the sidelines of the 51st Asia Pacific Privacy Authorities Forum in Tokyo.
As part of the enhanced cooperation, Hong Kong and Singapore also jointly developed a Guide to Data Protection by Design for ICT Systems.
|
| |
The PDPC has issued a public consultation on the proposed data portability and data innovation provisions, in which interested parties are invited to submit their views by 17 July 2019. The proposed data portability provision will provide individuals with greater control over their personal data and enable greater access to more data by organisations to facilitate data flows and increase innovation, while the proposed data innovation provision makes it clear that organisations can use data for appropriate business purposes without individuals’ consent.
|
| |
Singapore has won a top award at the prestigious World Summit on the Information Society (WSIS) Prizes 2019, and the PDPC's Model AI Governance Framework is part of this winning initiative.
|
|
|
|
|
New Resources
|
|
|
| |
ICONZ-Webvisions has provided a new tool - Docukit Data Protection App - for DPOs to manage personal data and IT systems.
|
| |
Straits Interactive has provided a free tool - DPOinBox - for DPOs to develop and implement their data protection management programme.
|
| |
The PDPC has introduced a free-to-use tool for generating basic data protection template notices to help an organisation inform their stakeholders, such as customers, employees, job applicants, donors, service users and volunteers, on how it manages their personal data.
|
|
|
|
|
Commission's Decisions
Jun 2019
|
|
|
| ● |
A financial penalty of $10,000 was imposed on AIA for failure to take reasonable security arrangements in its letter generation process.
|
| ● |
A warning was issue to Xbot Pte. Ltd for failing to put in place data protection policies to comply with the provisions of the PDPA.
|
| ● |
Cigna Europe Insurance Company S.A-N.V. was found not in breach of the PDPA in relation to allegations that it had failed to take reasonable security arrangements to prevent unauthorised disclosure of the personal data of its policy members.
|
| ● |
Personal data of participants in a registration exercise via InfoCorp’s website were disclosed to other participants. A $6,000 financial penalty was imposed.
|
| ● |
In a data breach involving unauthorised access and deletion of its database by a hacker, a financial penalty of $33,000 was imposed on DS Human Resource.
|
|
|
|
Read more Commission's Decisions here
|
|
|
|
Help and Resources for DPO
|
|
|
Get to know the essentials of the PDPA through this interactive learning tool developed by the PDPC. Modules 1 to 5 cover the basics you will need to know about the key terms and organisations’ obligations under the PDPA, and offer ways in which data protection officers can develop good data protection policies and practices.
|
DPMP is a systematic framework to help organisations establish a robust data protection infrastructure. It covers management policies and processes for the handling of personal data as well as defines roles and responsibilities of the people in the organisation in relation to personal data protection.
|
Introduces key principles and illustrations for conducting a Data Protection Impact Assessment, which is a process that identifies, assesses and addresses personal data protection risks.
|
|
|
|
|
If you want to reach out, please contact us online or call +65 6377 3131.
|
|
|
