Careers@IDA Infocomm123

Infocomm Snapshots

Personal Data Protection Act kicks in

Posted date: 6 June 2013

Consumers in Singapore can opt out of unsolicited phone calls, faxes and advertisement messages from telemarketers when Singapore's Do Not Call (DNC) Registry comes into effect from 2 January next year. This was announced by Minister for Communications and Information Dr Yaacob Ibrahim, at the official launch of the Personal Data Protection Commission (PDPC) and inaugural Personal Data Protection Seminar at the Grand Copthorne Waterfront Hotel Grand Ballroom on 15 May 2013.

Starting 2 January 2014, individuals can register their Singapore mobile or fixed-line numbers with the DNC Registry, and organisations must check against the DNC Registry to confirm that the number is not listed in the DNC Registry before making a marketing call on the phone, via fax or via an SMS or MMS.

Dr Yaacob highlighted the importance of protecting personal data in this technologically progressive era. “Technological advances have given insights into customers' needs, wants and behaviours. Businesses collect data to deliver personalised services and customised products,” he said. “However, as these technologies become more intelligent and intrusive, there is an increasingly higher risk of consumers' personal data being misused.”

PDPC launch
The official launch of the Personal Data Protection Commission and the inaugural Personal Data Protection Seminar.

The DNC Registry, which was set up in recognition of this need to “build trust”, is one aspect of the Personal Data Protection Act (PDPA). Enacted on 2 January 2013, the PDPA aims to protect individuals' personal data against misuse while promoting proper management of personal data in organisations. It is administered and enforced by the PDPC.

Speaking at the Personal Data Protection Seminar, PDPC Chairman Mr Leong Keng Thai said the Commission was committed to working with the industry to address the opportunities and challenges that arise with the implementation of personal data protection.

On 15 May, the PDPC launched a second public consultation exercise on the DNC Registry to seek views from individuals and businesses on the methods and requirements for telephone number registration, business operating rules and proposed charges to be levied for organisations.

While the DNC Registry will come into effect on 2 January 2014, the personal data protection requirements and provisions will take effect from 2 July 2014.

Over the past few months, PDPC has been actively engaged in efforts to help the industry comply with the PDPA requirements. It has reached out to more than 30 associations on adopting good data protection practices and educating data protection officers.

Besides advising organisations on data protection matters, PDPC is collaborating with SPRING Singapore to reach out to small and medium enterprises. It is also working with the Singapore Workforce Development Agency on a Workforce Skills Qualification framework to be incorporated into a data protection training course.

Starting from June 2013, PDPC will be organising fortnightly workshops to develop organisations' capabilities and knowledge of PDPA and personal data protection. Annual seminars are also being planned to engage and educate individuals and organisations on data protection matters.

The Personal Data Protection Seminar

The inaugural Personal Data Protection Seminar was held on 15 May 2013 to engage industry stakeholders, deepen their understanding and appreciation of the Personal Data Protection Act and to facilitate exchanges, sharing of knowledge and best practices on data protection among businesses. The theme for the seminar was “Data Protection Trends, Challenges and Benefits for Businesses Today”.

Among the keynote speakers for the event was Mr Timothy Pilgrim, Privacy Commissioner of the Office of the Australian Information Commissioner. Giving a global perspective on data protection and its impact on Singapore, Mr Pilgrim spoke about the role that good privacy protection plays in “building and protecting customer trust, business reputation and brand equity consideration”. In the global context, this would help cross-border transfers of information and strengthen Singapore’s position as a trusted business hub.

Mr Amos Tan, Commission Member and Director (Communications & Operations), PDPC, gave an overview of the Singapore Personal Data Protection Regime.  The seminar also included a panel discussion on the topic “Organisation Accountability and Compliance: Benefits, Challenges and Best Practices for Businesses”. The discussion was moderated by Professor Simon Chesterman, Dean and Professor of Law, National University of Singapore.