Personal Data Protection Act 2012 · 2020 Revised Edition · Part 6 · Care of Personal Data
24. Protection of personal data
Feedback & supportLast amended by an amending law of 2020.
An organisation must protect personal data in its possession or under its control by making reasonable security arrangements to prevent —
organisation
“organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;
unauthorised access, collection, use, disclosure, copying, modification or disposal, or similar risks; and
the loss of any storage medium or device on which personal data is stored.
loss
“loss” means —(a)a loss in property or a supply of services, whether temporary or permanent; or(b)a loss of an opportunity to earn remuneration or greater remuneration or to gain a financial advantage otherwise than by way of remuneration,but excludes, in relation to an individual, the loss of personal data about the individual;