
Knowledge Highlights 8 December 2023
With effect from 1 October 2022, the maximum financial penalties which the Personal Data Protection Commission (“PDPC”) may impose have increased as follows:
An organisation’s annual turnover in Singapore will be ascertained by PDPC from the organisation’s most recent audited accounts available at the time the financial penalty is imposed.
Following these latest amendments to the PDPA, PDPC has updated the Advisory Guidelines on Enforcement of the Data Protection Provisions and the Guide on Active Enforcement which articulate PDPC’s interpretation and enforcement approach to help organisations in their compliance with the PDPA.
By way of background, the Personal Data Protection (Amendment) Act 2020 (“Amendment Act”) was gazetted on 10 December 2020. While most of the provisions in the Amendment Act have since come into force on 1 February 2021, there are different dates of commencement for several sections, for example in relation to these increased financial penalties.
On the new data portability obligation (new Part 6B of the PDPA), the commencement date has yet to be announced. For more information, please refer to our previous article titled “Expected date of commencement of Personal Data Protection (Amendment) Bill, and preparatory steps for organisations” on our recommendations on preparatory steps for organisations to consider undertaking.
Reference materials
The following materials are available on the PDPC website www.pdpc.gov.sg and Singapore Statutes Online sso.agc.gov.sg: