Personal Data Protection Act 2012 (PDPA): Singapore's primary data protection legislation that governs the collection, use, disclosure, and care of personal data. It provides a baseline standard for personal data protection in Singapore.
PDPA Regulations: Subsidiary legislation under the PDPA that provides specific requirements and obligations for organizations handling personal data.
PDPC Advisory Guidelines: Guidelines issued by the Personal Data Protection Commission providing practical guidance for organizations to comply with the PDPA.
Banking Act: Regulates the banking industry in Singapore, including provisions for banking secrecy and data protection in financial institutions.
Healthcare Services Act: Governs healthcare services and includes provisions for protecting healthcare-related data and patient information.
Cybersecurity Act 2018: Establishes a framework for the protection of critical information infrastructure and cybersecurity in Singapore.
Copyright Act: Protects original works and databases, relevant for licensing agreements involving data compilations and databases.
Trade Secrets Act 2018: Provides protection for confidential information and trade secrets, including proprietary data.
Contract Law (Chapter 53): Singapore's primary contract law that governs the formation and enforcement of contracts, including license agreements.
Electronic Transactions Act: Provides legal framework for electronic transactions and digital signatures, relevant for digital data licensing.
MAS Guidelines: Regulatory guidelines issued by the Monetary Authority of Singapore specific to data handling in the financial sector.
Cross-border Data Transfer Regulations: Requirements under the PDPA for transferring personal data outside of Singapore, including the need for comparable protection standards.
APEC Cross-Border Privacy Rules: Regional framework for cross-border data transfers within APEC member economies.
GDPR Compliance Requirements: European Union's General Data Protection Regulation requirements that may apply if dealing with EU data subjects or organizations.
