The Singapore Personal Data Protection Act (PDPA) was
recently amended, with the latest amendments taking effect on 1
February 2021. This article examines some of these changes and
their potential impact.
Amongst other changes, the amendments introduced a mandatory
data breach notification, criminal offences, changes concerning
consent and data portability, and higher penalties for contravening
the PDPA. Here we take a more detailed look at the changes and the
most frequently asked questions they raise.
Introducing a mandatory data breach notification
obligation
What constitutes a notifiable data breach?
A data breach that:
- results in or is likely to result in
significant harm to an affected individual; or
