PRIMER SERIES: LEADING ISSUES IN LAW AND TECHNOLOGY

My Digital Lock Pte Ltd [2018] SGPDPC 3

• Relationship between privacy laws and data protection
• Powers and Role of the PDPC

PDP(A) 2.2.21

• Updates on the role of PDPC and penalties for organisations/individuals
• Changes to, and restructuring of, the consent requirement
• Data breach notification and data portability
• Updates to the rules on digital marketing

Fines & Penalties

• 10% annual turnover or $1 million for DP (tiered penalty caps for DNC)
• Criminal penalties for individuals that mishandles personal data (knowing/reckless improper use, disclosure or re-identification of anonymised PD)

Breach Notification

• Implement breach notification measures for PDPC and affected individuals
• A notifiable data breach occurs when the breach either results in, or is likely to result in, significant harm to an affected individual; or is, or is likely to be, of a significant scale

Consent

• Shift away from consent-centricity by expanding deemed consent and exceptions

Data Portability

• To provide consumers with greater autonomy to control their personal data
• To facilitate consumers switching or adding services across innovative platforms and competitive or complementary service providers

Digital Marketing

• Covering new communications platforms and apps
• Consistency across the email, texting and telecomm services
• Prohibiting address harvesting and dictionary attacks
• Oversight by the PDPC