Cookies Policy

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we’ll assume that you are happy to accept these cookies.To get more information about these cookies and the processing of your personal data, check our Cookies Policy.

Continue

Ince Gordon Dadds Emergency Response +442072836999

News
From Ince Gordon Dadds

Personal Data Protection Commission of Singapore publishes factsheet summarising key GDPR requirements

04.10.2017

In anticipation of the EU General Data Protection Regulation (GDPR) entering into force on 25 May 2018, the Personal Data Protection Commission of Singapore (PDPC) has published a factsheet summarising the key requirements under the GDPR.

This comes as no surprise, seeing that the GDPR applies to any organisation that processes personal data of individuals in the EU, including organisations established outside of the EU where the processing relates to offer of goods or services to EU individuals or monitoring of the behaviour of EU individuals. Processing of personal data is lawful if, amongst others, consent is given by the individual and the processing is necessary for the performance of a contract.  An organisation found to have infringed the GDPR could face a fine of up to 20 million EUR or 4% of its worldwide annual turnover, whichever is the higher.

While it is encouraging to see the PDPC take an active step in spreading awareness to Singapore organisations about the reach of the GDPR, this factsheet does not express the differences (if any) between the Singapore data protection rules and the GDPR.  It is possible that organisations with global operations may simply choose to abide by the set of rules that are on the whole more stringent, than to appreciate the specific nuances of each set of rules at the risk of falling afoul of a particular subsection/requirement.  

The said factsheet can be found here.

For more information on the PDPC or the applicability of the GDPR to Singapore businesses, please contact the author at felicia.tan@incisivelaw.com.