Data privacy law updates eyed by Singapore regulators

In early 2019, Singapore’s data privacy regulators proposed that the country’s data privacy law could use two new updates—a data breach notification requirement and a right of data portability for the country’s residents. “Multinational [organizations] in Singapore would like to have an adequacy determination.”Singapore’s Personal Data Protection ActOn October 15, 2012, Singapore passed its data protection law, the Personal Data Protection Act (PDPA), putting into place new rules for the collection, use, and disclosure of personal data. It created a national “Do Not Call” register and it established the country’s primary data protection authority, the Personal Data Protection Commission. Proposed data privacy additionsOn February 25, 2019, Singapore’s Personal Data Protection Commission published a “discussion paper” on data portability, explaining the benefits of adding a data portability requirement to the PDPA. Don’t reinvent the data privacy wheelSingapore has not proposed a time frame for when it wants to finalize the data portability rights and data breach notification requirements.