dotlah! dotlah!
  • Cities
  • Technology
  • Business
  • Politics
  • Society
  • Science
  • About
Social Links
  • zedreviews.com
  • citi.io
  • aster.cloud
  • liwaiwai.com
  • guzz.co.uk
  • atinatin.com
0 Likes
0 Followers
0 Subscribers
dotlah!
  • Cities
  • Technology
  • Business
  • Politics
  • Society
  • Science
  • About
  • Technology

Personal Data Protection Commission Introduces Three Initiatives To Strengthen Accountability Among Organisations & Encourage Data Innovation

  • May 27, 2019
Total
0
Shares
0
0
0

The trusted use of data is the foundation of a strong Digital Economy, especially given the increased volume of personal data generated through customer activities and used to enhance products and services. While a nimble and forward-looking regulatory approach to data protection will provide an environment to build trust and facilitate innovation, organisations must shift from compliance to accountability in the management of personal data. This includes taking responsibility for how organisations use data collected from individuals, and proactively putting in place measures to safeguard such data. The Personal Data Protection Commission (PDPC) today introduced three new initiatives to facilitate the movement and use of data to support innovation, and to strengthen accountability among organisations:

1) A public consultation to seek views on proposed data portability and data innovation provisions, as part of the review of the Personal Data Protection Act 2012 (PDPA);

2) A new Guide on Active Enforcement as part of its drive for organisations to shift from compliance to accountability; and

3) An updated Guide to Managing Data Breaches 2.0, to help organisations manage and respond to data breaches more effectively.

These were announced by Deputy Commissioner of PDPC, Mr Yeong Zee Kin at the “Know Ahead to Stay Ahead – Leadership’s Engagement in Data Protection” session. The event, co-organised by the PDPC and Singapore Business Federation, and supported by the Law Society of Singapore, is part of Singapore’s week-long Privacy Awareness Week, a global initiative by the Asia Pacific Privacy Authorities.

Mr Yeong said, “Data is a key enabler of digital transformation, but a balance must be achieved between data protection and business innovation. We are taking firm steps to position Singapore as a trusted data hub in the global Digital Economy by seeking feedback on the proposed data portability and innovation provisions, as well as test bedding data breach notification measures. The PDPC also recognises the importance of being responsive and agile in enforcing data protection in an environment of fast evolving data use, coupled with sweeping technological advances. Hence, the PDPC has converted its knowledge and experience in investigations to practical enforcement approaches in a Guide to Active Enforcement which businesses can refer to, and also updated the Guide to Managing Data Breaches.”

Data Portability and Data Innovation Provisions Public Consultation

Firstly, the PDPC launched its third public consultation under the ongoing review of the PDPA, to seek feedback and views on the proposed introduction of the data portability and data innovation provisions. This consultation builds on the data portability discussion paper launched in February 2019.

The proposed data portability provision will provide individuals with greater control over their personal data and enable greater access to more data by organisations to facilitate data flows and increase innovation, while the proposed data innovation provision makes it clear that organisations can use data for appropriate business purposes without individuals’ consent. Collectively, the proposals provide a balanced regulatory approach to empower consumer choice and support innovation in a Digital Economy.

This approach is aligned with a global push towards data portability, with jurisdictions such as the European Union, Australia, India, Japan and New Zealand either having implemented or planning to implement data portability in their respective data protection regimes. Such alignment is crucial to ensuring that the PDPA keeps pace with progressive global developments and go towards strengthening international recognition of Singapore’s data protection regime

Guide to Active Enforcement

Secondly, the PDPC has introduced its new guide to Active Enforcement, which articulates its approach in deploying its regulatory powers to act efficiently and effectively when dealing with data breaches to safeguard the public interest. The PDPC has introduced a new expedited decision process to bring investigations on clear-cut data breaches to a conclusion quickly. The process draws on data breach cases in the last four years and feedback from stakeholders. To be eligible for handling under the new expedited decision process, cases must meet certain conditions. These include:

  • The nature of the data breach is similar to precedent cases with similar categories of facts; and
  • Where there is an upfront admission of liability for breaching the PDPA by the organisation.

In expedited decision cases where financial penalties are involved, the organisation’s admission of its role in the incident will be taken into consideration as a strong mitigating factor. Examples of cases eligible for the process include common forms of data breaches such as URL manipulation, poor password management, or printing errors resulting in incorrect recipients.

However, the PDPC is also aware that even companies that are well prepared may not eliminate all risk of data breaches. As such, organisations that can demonstrate to the PDPC that they have in place proper accountability practices, monitoring and remediation plans – such as Data Protection Trustmark-certified organisations – can request to the PDPC for an undertaking option in the case of a data breach. The undertaking is a written promise by the organisation that it is ready to execute a fully developed and prepared contingency plan to resolve a data breach when it has occurred; or where the PDPC assesses that an undertaking would achieve a similar or better enforcement outcome as opposed to a full investigation.

The Active Enforcement guide also includes examples and clarifications to address common queries from companies such as policy considerations by the PDPC when deciding to initiate or discontinue an investigation, as well as financial penalty assessment factors.

Guide to Managing Data Breaches 2.0

Lastly, the PDPC has also updated its existing guide to better support organisations in managing data breaches effectively. Under the Guide to Managing Data Breaches 2.0, organisations should have in place monitoring measures to provide early detection and warning for possible data breaches, and a data breach management plan for reporting and assessing a data breach.

The guide also sets out the steps that organisations can take in responding to a data breach, which include:

  • Containing the breach to prevent further compromise of personal data
  • Assessing the risks and impact of the breach
  • Reporting the breach to the PDPC and informing affected individuals if necessary
  • Evaluating response to the breach and reviewing actions taken to prevent further data breaches

The guide also updates recommendations in two main areas: (i) thresholds for notifying the PDPC and individuals of a data breach, and (ii) the timeliness of notification. Notification thresholds are expanded to consider large numbers to be where 500 or more individuals are affected, or where significant harm or impact to the individuals is likely to occur due to a breach. The PDPC also recommends that organisations conducting internal investigations and assessments of a potential data breach take no more than 30 days from when they are aware of a potential breach, and if data breach notification thresholds are met, to then notify the PDPC no later than 72 hours from the time they have completed their assessment .

 

Total
0
Shares
Share
Tweet
Share
Share
Related Topics
  • Data security
  • PDPC
  • Personal Data Protection Commission
majulah

Previous Article
  • Lah!

Our Singapore – National Day Parade 2019 Theme Song

  • May 27, 2019
View Post
Next Article
  • Cities
  • Lah!

Land Transportation Master Plan 2040: Bringing Singapore Together

  • May 27, 2019
View Post
You May Also Like
View Post
  • Cities
  • Technology

Meralco PowerGen’s PacificLight starts up 100 MW fast-response plant in Singapore

  • dotlah.com
  • June 20, 2025
View Post
  • Technology

Apple services deliver powerful features and intelligent updates to users this autumn

  • Dean Marc
  • June 12, 2025
View Post
  • Artificial Intelligence
  • Machine Learning
  • Technology

Apple supercharges its tools and technologies for developers to foster creativity, innovation, and design

  • Dean Marc
  • June 11, 2025
View Post
  • Technology
  • Working Life

It’s time to stop debating whether AI is genuinely intelligent and focus on making it work for society

  • dotlah.com
  • June 8, 2025
oracle-ibm
View Post
  • Artificial Intelligence
  • Technology

IBM and Oracle Expand Partnership to Advance Agentic AI and Hybrid Cloud

  • Dean Marc
  • May 6, 2025
View Post
  • Software
  • Technology

Canonical Releases Ubuntu 25.04 Plucky Puffin

  • Dean Marc
  • April 17, 2025
View Post
  • Artificial Intelligence
  • Technology

Tokyo Electron and IBM Renew Collaboration for Advanced Semiconductor Technology

  • Dean Marc
  • April 2, 2025
View Post
  • Artificial Intelligence
  • Technology

IBM contributes key open-source projects to Linux Foundation to advance AI community participation

  • dotlah.com
  • March 22, 2025


Trending
  • Holiday Gifts 1
    • Gears
    12 Days until Christmas: 8 Perfect Holiday Gift Ideas
    • December 13, 2024
  • 2
    • Cities
    Keppel Strengthens Offerings In Gas Solutions With Delivery Of Its First LNG Carrier
    • October 16, 2020
  • 3
    • Technology
    Singapore International Cyber Week 2020 – Highlights And Testimonials
    • October 21, 2020
  • 4
    • Lah!
    New Therapeutic Garden At Telok Blangah Hill Park
    • March 10, 2020
  • 5
    • Lah!
    Singapore Named “Best Seaport – Asia” For The 32nd Time
    • November 15, 2020
  • 6
    • Technology
    Virtually Supporting Seniors During This Stay-at-home Period
    • May 26, 2020
  • 7
    • Lah!
    • Technology
    First On-Demand Autonomous Shuttle Trial Opens To Public
    • August 20, 2019
  • 8
    • Cities
    • Lah!
    Singaporean Firm To Launch A One-Seater Flying Vehicle In The USA
    • May 8, 2019
  • town-square-people-nico-benedickt-T6y2QE9IIfI-unsplash 9
    • Cities
    How Local Municipalities Can Manage Themselves More Efficiently
    • March 17, 2021
  • 10
    • Lah!
    • Society
    To Stop COVID-19, Asian Countries Embrace Wearing Face Masks
    • April 30, 2020
  • 11
    • Society
    • Technology
    Singtel Named Employer Of Choice In Asia
    • October 8, 2020
  • we-are-all-collateral-damage 12
    • Op-Ed
    • People
    • Politics
    • World Events
    From Suffering To Uprising. The Inevitability Of Violent Protests In Societies We Are Creating.
    • June 30, 2023
Trending
  • 1
    Meralco PowerGen’s PacificLight starts up 100 MW fast-response plant in Singapore
    • June 20, 2025
  • 2
    A Father’s Day Gift for Every Pop and Papa
    • June 14, 2025
  • 3
    Apple services deliver powerful features and intelligent updates to users this autumn
    • June 12, 2025
  • 4
    Apple supercharges its tools and technologies for developers to foster creativity, innovation, and design
    • June 11, 2025
  • 5
    It’s time to stop debating whether AI is genuinely intelligent and focus on making it work for society
    • June 8, 2025
  • 6
    PBBM asks Singapore to invest more in PH renewable energy projects
    • June 6, 2025
  • 7
    Singapore PM Wong arrives in Malacañang
    • June 4, 2025
  • 8
    Renewable energy, carbon credits are priority areas of cooperation for Singapore, Philippines: Lawrence Wong
    • June 4, 2025
  • 9
    Singapore businesses eye more investments in PH, says PM Wong
    • June 4, 2025
  • 10
    The Summer Adventures : Hiking and Nature Walks Essentials
    • June 3, 2025
Social Links
dotlah! dotlah!
  • Cities
  • Technology
  • Business
  • Politics
  • Society
  • Science
  • About
Connecting Dots Across Asia's Tech and Urban Landscape

Input your search keywords and press Enter.