GUIDE ON DATA PROTECTION CLAUSES FOR AGREEMENTS …
3. A Contractor who processes personal data on behalf of, and for the purposes of, a Customer will likely be considered as a data intermediary1 of the Customer under the Personal Data Protection Act 2012 (“PDPA”). Where the Contractor is processing personal data as a 2data intermediary pursuant to a contract in writing, the Contractor
Download GUIDE ON DATA PROTECTION CLAUSES FOR AGREEMENTS …
Information
Domain:
Source:
Link to this page:
Documents from same domain
ADVISORY GUIDELINES ON THE PERSONAL DATA …
www.pdpc.gov.sg4 ADVISORY GUIDELINES ON THE PERSONAL DATA PROTECTION ACT FOR NRIC AND OTHER NATIONAL IDENTIFICATION NUMBERS (issued 31 August 2018) 2.4 The Protection9 obligation requires organisations to make reasonable security arrangements to protect personal data in its possession or under its control.
ADVISORY GUIDELINES ON THE PERSONAL DATA …
www.pdpc.gov.sg6 ADVISORY GUIDELINES ON THE PDPA FOR SELECTED TOPICS (revised 31 August 2018) PART I: INTRODUCTION AND OVERVIEW 1 Introduction 1.1 The Personal Data Protection Act 2012 (the ^PDPA) establishes a general data
GUIDE TO MANAGING DATA BREACHES 2 - pdpc.gov.sg
www.pdpc.gov.sgGUIDE TO MANAGING DATA BREACHES 2.0 11 Each data breach response needs to be tailored to the circumstances of the incident. Generally, the actions taken after a data breach should
12 The Consent Obligation - PDPC
www.pdpc.gov.sgthat an individual had provided verbal consent. Example: An individual wishes to sign up for certain services with a service provider over the telephone. The service provider may request for the individual’s consent to the collection and use of …
MODEL ARTIFICIAL INTELLIGENCE GOVERNANCE …
www.pdpc.gov.sgMODEL ARTIFICIAL INTELLIGENCE GOVERNANCE FRAMEWORK 5 EDITION DATE RELEASED SUMMARY SECOND 21 January 2020 Operations management • Provided guidance to organisations to adopt a risk-
The Retention Limitation Obligation - Ch 18 (270717)
www.pdpc.gov.sgUnder the Limitation Act (Cap. 163), actions founded on a contract (amongst others) must be brought within 6 years from the date on which the cause of action accrued. Hence an organisation may wish to retain records relating to its contracts for 7 years from the date of termination of the contract and possibly
Sample Clauses and Templates for Customers V2
www.pdpc.gov.sgconsent is permitted or required under the PDPA or any other written law. 4. This template Data Protection Policy is crafted broadly for general use and purposes, but may ... This template Data Protection Notice contains general sample clauses which an organisation supplying and marketing goods or services (or both) to
GUIDE TO BASIC DATA ANONYMISATION TECHNIQUES …
www.pdpc.gov.sgAnonymisation techniques for streaming data like audio, video, images, big data (in its raw form), geolocation, bio-metrics etc. create additional challenges and require entirely different anonymisation techniques, which are outside the scope of this Guide.
The Transfer Limitation Obligation - Ch 19 (270717) - PDPC
www.pdpc.gov.sgADVISORY GUIDELINES ON KEY CONCEPTS IN THE PDPA (revised 27 July 2017) 19 The Transfer Limitation Obligation 19.1 Section 26 of the PDPA limits the ability of an organisation to transfer personal data outside Singapore. In particular, section 26(1) provides that an organisation must
Related documents
(Text with EEA relevance)
ec.europa.eurules on international data transfers are laid down in Chapter V of that Regulation, that is in Articles 44 to 50. While the flow of personal data to and from countries outside the European Union is essential for the expansion of international cooperation and cross-border trade, the level of protection afforded to personal data in the European
De-Identification of Personal Information
nvlpubs.nist.govDe-identification is a tool that organizations can use to remove personal information from data that they collect, use, archive, and share with other organizations. De-identification is not a single technique, but a collection of approaches, algorithms, and tools that can be applied to different kinds of data with differing levels of effectiveness.
Data Protection Act 2018 - Legislation.gov.uk
www.legislation.gov.ukSpecial categories of personal data 10 Special categories of personal data and criminal convictions etc data 11 Special categories of personal data etc: supplementary Rights of the data subject 12 Limits on fees that may be charged by controllers 13 Obligations of credit reference agencies 14 Automated decision-making authorised by law: safeguards
Personal Data Protection Bill - Ministry of Electronics ...
www.meity.gov.inpersonal data resulting from measurements or technical processing operations carried out on physical, physiological, or behavioural characteristics of a data principal, which allow or confirm the unique identification of that natural person;
New Guidance on Direct Marketing - PCPD
www.pcpd.org.hkof their personal data in direct marketing (d) Present information regarding the collection, use or provision of personal data in a manner that is easily understandable and, if in written form, easily readable (e) Honour and update the data subject’s request for ceasing the use of his/her personal data in a professional and timely manner
Office of the Privacy Commissioner for Personal Data
www.pcpd.org.hkto personal data privacy issues can be raised. Proper Handling of the Recorded Images DPP2(1) and DPP2(2) impose a duty on data users to ensure data accuracy and that there is no excessive retention of personal data. The personal data collected should be deleted from the CCTV as soon as practicable once the purpose of collection is fulfilled.