Personal Data Protection Act (PDPA) — Dawn of a new paradigm

guest · Jul 8, 2019

Personal Data Protection Act (PDPA) — Dawn of a new paradigm
It remains to be seen whether the Personal Data Protection Act will be effective at reining in tech behemoths and serial data abusers
July 8, 2019
https://www.bangkokpost.com/business/1708787/dawn-of-a-new-paradigm

The Personal Data Protection Act (PDPA) came into effect in May with a one-year grace period for compliance by companies and government agencies that handle personal data.

A new paradigm of personal data protection is dawning, following the former Wild West days of companies flagrantly commodifying, buying and selling deeply personal information. But it's still unclear whether these sweeping regulations will rein in tech behemoths and serial data abusers like Facebook.

The regulation is expected to include five vertical sectors: healthcare, telecom, utilities, defence/national security and one more yet to be decided.
All those guidelines and regulations will be approved by the Personal Data Protection Commission, including audit principle guidelines.
Click to expand...

Personal Data Protection Act Overview

Personal data in Singapore is protected under the Personal Data Protection Act 2012 (PDPA).

The PDPA establishes a data protection law that comprises various rules governing the collection, use, disclosure and care of personal data. It recognises both the rights of individuals to protect their personal data, including rights of access and correction, and the needs of organisations to collect, use or disclose personal data for legitimate and reasonable purposes.
Objectives of the Personal Data Protection Act
By regulating the flow of personal data among organisations, the PDPA also aims to strengthen and entrench Singapore’s competitiveness and position as a trusted, world-class hub for businesses.
Click to expand...

guest · Jan 9, 2020

India’s answer to GDPR: Data protection legislation set to pass this year
But critics condemn sweeping government exemptions
January 9, 2020
https://portswigger.net/daily-swig/...-protection-legislation-set-to-pass-this-year

India’s answer to GDPR, the EU’s data protection law, has achieved quite a feat: drawing the ire of both Big Tech and privacy advocates.

A second draft of the Personal Data Protection (PDPA) Act (PDF), approved by Narendra Modi’s government on December 4, has retained data localization provisions that critics feel over zealously protect personal data.
In its latest version, the PDPA, which will govern how personal information is handled by business and government bodies within India, highlights, in particular, how technology companies must manage the data of Indian citizens.

The bill, while requiring sensitive data to remain on servers within India’s territory, at the same time permits non-sensitive data to be stored outside of the country. The scope of sensitive, or critical data – that which is to be stored locally – is defined by the Indian government.
Click to expand...

Srikrishna also observed “an attempt” by the government in the PDPA’s second draft “to control social media by reserving a right of access without consent of non-personal data or anonymized data” – justified by the government on the basis of improving policymaking and public services.

The PDPA will be introduced into a society where privacy is less prized than Europe, he told The Daily Swig.
The PDPA is expected to pass when parliament reconvenes in February.
Click to expand...

guest · May 8, 2020

Data privacy law updates eyed by Singapore
May 7, 2020
https://blog.malwarebytes.com/malwarebytes-news/2020/05/data-privacy-law-updates-eyed-by-singapore/

In early 2019, Singapore’s data privacy regulators proposed that the country’s data privacy law could use two new updates—a data breach notification requirement and a right of data portability for the country’s residents.

Today, Singaporeans enjoy some of the same data protection rights found in the European Union and even in California.
For starters, Singaporeans have the right to request that an organization hand over any personal data that belongs to them. Further, Singaporeans also have the right to correct that personal data should they find any errors or omissions.

Singapore’s data privacy law also includes restrictions for how organizations collect, use, or disclose the personal data of Singaporeans.
Click to expand...

On October 15, 2012, Singapore passed its data protection law, the Personal Data Protection Act (PDPA), putting into place new rules for the collection, use, and disclosure of personal data.
Proposed data privacy additions
On February 25, 2019, Singapore’s Personal Data Protection Commission published a “discussion paper” on data portability, explaining the benefits of adding a data portability requirement to the PDPA.

“Data portability, whereby users are empowered to authorize the movement of their personal data across organizations, can boost data flows and support greater data sharing in a digital economy both within and across sectors,” the PDPC said in a press release.
Less than one week after publishing its data portability discussion paper, the Personal Data Protection Commission also announced plans to add a data breach notification requirement to the PDPA.
Why attempt data privacy updates now?
Aligning a country’s data protection laws with the protections provided in GDPR is nothing new, and in fact, multiple countries around the world are currently engaged in the same process.
Wilmer Hale’s Freeman said it is likely that Singapore looked to Japan and wanted the same.
Click to expand...

Singapore has not proposed a time frame for when it wants to finalize the data portability rights and data breach notification requirements. Nor has it specified the actual regulations it would put in place—including how long before the Personal Data Protection Commission would enforce the new requirements, or what those enforcement actions would entail.
Click to expand...

guest · May 20, 2020

Singapore: Important changes proposed to Singapore’s Personal Data Protection Act
May 18, 2020
https://blogs.dlapiper.com/privacym...d-to-singapores-personal-data-protection-act/

Organisations should plan ahead for significant changes to Singapore’s Personal Data Protection Act (“PDPA”), proposed in a consultation paper published on 14 May 2020.

It is likely that most of the amendments set out in the draft Personal Data Protection (Amendment) Bill 2020 (“Bill”) will be passed, since the PDPC has previously carried out three consultations on key policy proposals, and the Bill consolidates all of these earlier proposals.
If passed, the Bill will be the first amendment to the PDPA since it was passed in 2012.

The key proposed amendments are: [...]
Click to expand...

The consultation period is open until 28 May 2020. To read the consultation paper, click here.
Click to expand...

guest · Jun 2, 2020

Delayed Implementation of Thailand’s Personal Data Protection Act
May 29, 2020
https://www.huntonprivacyblog.com/2...on-of-thailands-personal-data-protection-act/

The implementation of Thailand’s Personal Data Protection Act B.E. 2562 (A.D. 2019) (the “PDPA”) has been delayed until May 31, 2021.

Certain data controllers’ compliance with the main operative provisions concerning personal data protection (including those covering requests for data subjects’ consent; collection/use and disclosure of personal data; rights of data subjects; complaints; and civil liabilities and penalties), which were previously scheduled to come into force this year, has been deferred for another one-year period, i.e., until May 31, 2021.
Click to expand...

guest · Oct 9, 2020

Singapore’s amended Personal Data Protection Act to come into force before year end
October 7, 2020
https://www.technologylawdispatch.c...ction-act-to-come-into-force-before-year-end/

The Personal Data Protection (Amendment) Bill (Bill) was introduced and read for the first time in Parliament on October 5, 2020

The Bill proposes significant changes to Singapore’s Personal Data Protection Act 2012 (PDPA). The amendments seek to keep Singapore’s data protection laws up to date with evolving technology developments, as well as global regulatory trends, and to enhance its relevancy and attractiveness as a digital business hub for the region.
Click to expand...

After two further readings in Parliament and the president’s assent the Bill will come into force, which is currently expected to be before the end of 2020.
Click to expand...

guest · Oct 11, 2020

Indonesia Soon to Become the Fifth ASEAN Country to Adapt Data Privacy Laws
...joined the ranks with the first four ASEAN countries including Malaysia, Singapore, Philippines and Thailand
October 7, 2020
https://securityaffairs.co/wordpres...s/indonesia-personal-data-protection-law.html

On January 28th, Indonesia’s Ministry of Communication and Information Technology announced that the final draft for the Personal Data Protection Act has been submitted to the president of Indonesia.

The PDP Draft Law is now sitting with the House of Representatives and other concerned government officials. The press has been informed that they expect the draft law to be enacted this year.
Indonesia’s adaptation of the law heavily resembles the European Union’s GDPR. The draft bill accedes to almost all rights of data subjects as per the GDPR as well as the general regulations in regards to personal data processing.
Click to expand...

Wrapping It Up
Indonesia is a developing country in the process of digitizing its economy. In the last few years, there has been an unprecedented surge in internet and mobile usage with rapid development of online portals such as e-commerce platforms. Needless to say that it brings forth more challenges for the government to protect the citizens’ personal data. With the full implementation of draft personal data protection law in Indonesia, it is safe to assume that the future seems more secure and private for Indonesians.
Click to expand...

Indonesia drafts Personal Data Protection Act (June 5, 2019)

Log in or Sign up

Personal Data Protection Act (PDPA) — Dawn of a new paradigm

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Personal Data Protection Act (PDPA) — Dawn of a new paradigm

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches