Resource Library

This article summarises the legislative framework for the protection of personally identifiable information (PII).

The Personal Data Protection Act 2012 (Act) was passed by the Singapore Parliament on 15 October 2012 and came into effect in Singapore on 2 January 2013. A major component of the Act was to put in place general data protection provisions (Data Protection Provisions) that apply to all organisations operating in the private sector in Singapore. Previously, only limited confidentiality obligations existed in Singapore under certain sector specific legislation.