Section 28 — Personal Data Protection Act 2012 | laws.sg