Personal Data Protection Act 2012 · 2020 Revised Edition · Part 6 · Care of Personal Data
25. Retention of personal data
Feedback & supportAn organisation must cease to retain its documents containing personal data, or remove the means by which the personal data can be associated with particular individuals, as soon as it is reasonable to assume that —
organisation
“organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;
the purpose for which that personal data was collected is no longer being served by retention of the personal data; and
personal data
“personal data” means data, whether true or not, about an individual who can be identified —(a)from that data; or(b)from that data and other information to which the organisation has or is likely to have access;
retention is no longer necessary for legal or business purposes.
business
“business” includes the activity of any organisation, whether or not carried on for purposes of gain, or conducted on a regular, repetitive or continuous basis, but does not include an individual acting in his or her personal or domestic capacity;