30 May 2018

In May 2018, the Personal Data Protection Commission (“PDPC”) released a new Guide for Printing Processes for Organisations (“Guide”) and issued a revised set of Advisory Guidelines on In-vehicle Recordings by Transport Services for Hire (“Advisory Guidelines”).

New Guide for Printing Processes for Organisations

Published on 3 May 2018, the Guide aims to assist organisations and print vendors to have in place adequate measures in their printing processes to protect the personal data in their possession and / or control against unintended disclosure. For example, the Guide sets out several key principles which organisations may consider when designing controls to prevent unauthorised disclosure via their printing processes, such as segregation of the roles of the do-er and checker to ensure independence of the process and to ensure what each other’s scope of responsibilities is, or to ensure employees are well-trained to have a clear understanding on the workflow and handling of exceptions (who to turn to in times of doubts and inconsistencies), or to have contingency plans that are well-documented and communicated in the event of a data breach event.

Another suggestion in the Guide is to have a Data Inventory Map (“DIM”) which is a consolidation of all the data in the possession and/control of an organisation as it will make it easier for the organisation to be aware of potential flaws in each part of the printing life cycle, and to design adequate measures to correct these flaws.

For organisations which choose to outsource the printing (e.g. via external printers) and distribution of materials (e.g. via external mail and email operators) containing personal data, the Guide also sets out some key considerations for both organisations that outsource, as well as the print vendors they engage.

Revised Advisory Guidelines on In-vehicle Recordings by Transport Services for Hire

Released by the Land Transport Authority (“LTA”) on 22 May 2018, the Advisory Guidelines have been revised to include references to a set of installation guidelines (“installation guidelines”) for inward-facing in-vehicle recording devices (“IVRDs”) in public service vehicles such as taxis, private hire cars and buses (excluding omnibuses licensed to operate regular route services and private buses). The installation guidelines will come into effect on 22 June 2018.

The Advisory Guidelines were first issued on 9 April 2018.

The installation guidelines complement the Advisory Guidelines on in-vehicle recordings, which clarify the obligations under the Personal Data Protection Act that operators and drivers of transport services for hire must comply with when they use inward-facing IVRDs to capture individuals’ personal data. Together, these guidelines serve to protect commuter safety and their personal data, and prevent unauthorised access to the footage recorded by inward-facing IVRDs.

Reference materials

The following documents are available from the PDPC website www.pdpc.gov.sg and the LTA website www.lta.gov.sg:

 

Download PDF