Singapore Issues New Regulations In Advance Of Data Protection Law Entering Into Force

On July 2, 2014 Singapore's new Personal Data Protection Act (the "PDPA" or the "Act")) will go into force, requiring companies that have a physical presence in Singapore to comply with many new data protection obligations under the PDPA.   Fortunately, in advance of the Act's effective date, the Singapore Personal Data Commission has recently promulgated Personal Data Protection Regulations (2014) (the "Regulations") to clarify companies' obligations under the Act. 

Under the PDPA, an individual may request from an organization that is subject to the Act access to, and correction of, the personal data that the organization holds about that individual.  The Regulations clarify that the request must be made in writing and must include sufficient identifying information in order for the organization to process the request.  The Regulations also specify that the request for access or correction should be made to the company's Data Protection Officer (which companies