Finally, the Commission has issued a large number of advisory guidelines on the
PDPA
109
: general guidelines, sector-specific guidelines, and guidelines on specific
topics. For instance, there are guidelines regarding the protection of personal data for
the healthcare,
110 education,
111 social services,
112 and real estate
113 sectors. There
are also guidelines on managing data breaches
114 and securing personal data in
electronic medium.
115 While these guidelines are not legally binding,
116 they are
carefully studied by other government agencies,
117 lawyers,
118 and industry
players.
119
The guidelines are also updated from time to time. For instance, the Commission
recently held a public consultation on “Approaches to Managing Personal Data in
the Digital Economy”, and the results will be implemented in 2018–2019.
120
2.4 Self-Regulation Instruments
Various industries have incorporated aspects of the PDPA (including the advisory
guidelines) into their codes of conduct and industry guides. This includes the Life
109 PDPC Guidelines.
110 PDPC Advisory Guidelines for the Healthcare Sector.
111 PDPC Advisory Guidelines for the Education Sector.
112 PDPC Advisory Guidelines for the Social Service Sector.
113 PDPC Advisory Guidelines for the Real Estate Agency Sector.
114 PDPC Guide to Managing Data Breaches 2.0.
115 PDPC Guide to Securing Personal Data in Electronic Medium.
116 PDPC Introduction to the Guidelines para 3.1.
117 See e.g., Cyber Security Agency of Singapore “PDPC Guides” https://www.csa.gov.sg/
gosafeonline/resources/pdpc-guides. Accessed 30 August 2019.
118 See e.g., Hogan Lovells’ report “New PDPC guidance on data management practices in
Singapore”. https://www.hoganlovells.com/en/publications/new-pdpc-guidance-on-data-manage
ment-practices-in-singapore. Accessed 30 August 2019. CNP Law’s report on “Personal Data
Protection Committee issues sector specific advisory guidelines”. https://www.cnplaw.com/per
sonal-data-protection-committee-issues-sector-specific-advisory-guidelines/. Accessed 30 August
2019.
119 See e.g., the Singapore Council for Estate Agencies’ website which contains links to the relevant
advisory guidelines, and which encourages property agencies and agents to familiarise themselves
with these and other PDPC advisory guidelines. https://www.cea.gov.sg/legislation-guidelines/
practice-guidelines-circulars/personal-data-protection. Accessed 30 August 2019. “Singapore:
PDPC data management guides ‘emphasize accountability’”. https://www.dataguidance.com/singa
pore-pdpc-issues-guides-emphasising-accountability-data-management/. Accessed 30 August
2019. “Personal Data Protection Commission issues advisory guidelines on in-vehicle recording”.
https://www.opengovasia.com/articles/personal-data-protection-commission-issues-advisory-guide
lines-on-in-vehicle-recording. Accessed 30 August 2019.
120 PDPC Public Consultation for Approaches to Managing Personal Data in the Digital Economy;
PDPC Response to Feedback on the Public Consultation on Approaches to Managing Personal Data
in the Digital Economy.
320
E.-I. Ong
PDPA
109
: general guidelines, sector-specific guidelines, and guidelines on specific
topics. For instance, there are guidelines regarding the protection of personal data for
the healthcare,
110 education,
111 social services,
112 and real estate
113 sectors. There
are also guidelines on managing data breaches
114 and securing personal data in
electronic medium.
115 While these guidelines are not legally binding,
116 they are
carefully studied by other government agencies,
117 lawyers,
118 and industry
players.
119
The guidelines are also updated from time to time. For instance, the Commission
recently held a public consultation on “Approaches to Managing Personal Data in
the Digital Economy”, and the results will be implemented in 2018–2019.
120
2.4 Self-Regulation Instruments
Various industries have incorporated aspects of the PDPA (including the advisory
guidelines) into their codes of conduct and industry guides. This includes the Life
109 PDPC Guidelines.
110 PDPC Advisory Guidelines for the Healthcare Sector.
111 PDPC Advisory Guidelines for the Education Sector.
112 PDPC Advisory Guidelines for the Social Service Sector.
113 PDPC Advisory Guidelines for the Real Estate Agency Sector.
114 PDPC Guide to Managing Data Breaches 2.0.
115 PDPC Guide to Securing Personal Data in Electronic Medium.
116 PDPC Introduction to the Guidelines para 3.1.
117 See e.g., Cyber Security Agency of Singapore “PDPC Guides” https://www.csa.gov.sg/
gosafeonline/resources/pdpc-guides. Accessed 30 August 2019.
118 See e.g., Hogan Lovells’ report “New PDPC guidance on data management practices in
Singapore”. https://www.hoganlovells.com/en/publications/new-pdpc-guidance-on-data-manage
ment-practices-in-singapore. Accessed 30 August 2019. CNP Law’s report on “Personal Data
Protection Committee issues sector specific advisory guidelines”. https://www.cnplaw.com/per
sonal-data-protection-committee-issues-sector-specific-advisory-guidelines/. Accessed 30 August
2019.
119 See e.g., the Singapore Council for Estate Agencies’ website which contains links to the relevant
advisory guidelines, and which encourages property agencies and agents to familiarise themselves
with these and other PDPC advisory guidelines. https://www.cea.gov.sg/legislation-guidelines/
practice-guidelines-circulars/personal-data-protection. Accessed 30 August 2019. “Singapore:
PDPC data management guides ‘emphasize accountability’”. https://www.dataguidance.com/singa
pore-pdpc-issues-guides-emphasising-accountability-data-management/. Accessed 30 August
2019. “Personal Data Protection Commission issues advisory guidelines on in-vehicle recording”.
https://www.opengovasia.com/articles/personal-data-protection-commission-issues-advisory-guide
lines-on-in-vehicle-recording. Accessed 30 August 2019.
120 PDPC Public Consultation for Approaches to Managing Personal Data in the Digital Economy;
PDPC Response to Feedback on the Public Consultation on Approaches to Managing Personal Data
in the Digital Economy.
320
E.-I. Ong