Singapore legislation

Section 12

of Personal Data Protection Act 2012

Section 12

Policies and practices

An organisation must —

(a)

develop and implement policies and practices that are necessary for the organisation to meet the obligations of the organisation under this Act;

(b)

develop a process to receive and respond to complaints that may arise with respect to the application of this Act;

(c)

communicate to its staff information about the organisation’s policies and practices mentioned in paragraph (a); and

(d)

make information available on request about —

(i)

the policies and practices mentioned in paragraph (a); and

(ii)

the complaint process mentioned in paragraph (b).